Re: [Leaf-user] Am so lovin LEAF, but have got some question

[Jack C. <ja...@mo...>]

On Fri, 8 Feb 2002, Dennis S wrote:

> Well I tried a long winded version with due props for a lot of you here
> that have helped me get my LEAF FW running, through just your interaction
> on this list. Now I'm just asking if anyone has some suggestions for this.
> BIG THANKS for your time.
>
> At 04:09 PM 2/6/02, I wrote:
> >         If you really must get to the point of the story skip down to the
> > closing tag for
> ><LONG VERSION OF SHORT STORY>.
> >         Big thanks to many! Not in any order but how I'm finding them in
> > my mail archive, and I know I'll for
>
> snip, snip
>
> >their downloads", as I heard on the list.
> ></LONG VERSION OF SHORT STORY>.
> >
> >         What I am trying to do is not log some lines that keep showing up
> > in my messages.  I believe these to be either net-bios related messages
> > or VPN keep alives being broadcast from the corporate VPN connection.  I
> > can not just turn all of that off as I need to map local drives to
> > corporate assets.  However if I can tell the firewall to ignore or not
> > log these I will have met my goal.
> >
> >Feb  6 14:10:19 ardentpursuit kernel: ip_demasq_esp(): Inbound
> >from     MY.CORP.VPN.ADDRESS SPI SOME8DIGITHEXNO has no masq table entry.
> >
> >Feb  6 14:10:21 ardentpursuit kernel: ip_demasq_esp(): Inbound from
> >MY.CORP.VPN.ADDRESS SPI DIFF8DIGITHEXNO has no masq table entry.
>
> As Always...
>
>

If you're on Dachstein there's a SILENT_DENY option in network.conf that
is what you're looking for.

-- 
Jack Coates
Monkeynoodle: A Scientific Venture...