Date: Sat, 18 Apr 2015 14:30:13 +0200 From: Kai Gallasch <k@free.de> To: freebsd-jail@freebsd.org Subject: IPFW2 logging inside VIMAGE Jails? Message-ID: <55324E55.1000805@free.de>
next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --iwhbTEDpuWldV8oAMQ2XavaN95PxssGMq Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi. Is it possible at all to log actions of the IPFW2 firewall inside a running VIMAGE jail to the jail's syslog? I'm asking, because I see no firewall log entries inside the jail's /var/log/security log. What I find is, that log messages of jails with active IPFW rules are only logged on the jailhost (/var/log/security) - out of reach of any local jail admins.. My kernel is built without firewall support. The ipfw.ko is loaded dynamically when the server starts. No PF firewall is in use. - FreeBSD 10.1-RELEASE-p9 - /dev/bpf available inside jails - firewall logging enabled on the jailhost and also inside the jail I found https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D178482 (2 years old, FreeBSD 9.1 related) Cheers, Kai. --=20 PGP-KeyID =3D 0x70654D7C4FB1F588 --iwhbTEDpuWldV8oAMQ2XavaN95PxssGMq Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVMk5VAAoJEHBlTXxPsfWIP50P/RdEDQxbU5jXlyn+T9oNqh/F kaIAa1fLT7C6I1k54nGGWfC028t+FreqgKYa05y4Ywb4MBtm0Jh++pZZ8yt7JNj0 KX7cJO2ERDWLQDjArGhtjB+Zi56rucAPxVjHmzazNQPpHBhZN9j+WhNJCOKexabX ZdjWb5VqTFx1hc0P8tBee/Pnt+YJxwcWfpx1hA9UwJHtbI/S/0wu++gvKLpMh2jq CK2KQyYylDPYSm9cW7GQjdCsT3ulEhUO5xZp9VYCSvl862USV3Hsp7xzBpn9a2Vi r0eYIE0A+BnQtCZBZ92gDsUBIsChwTCeF1zPdyvYDpZmca5jhFFYMdSNpD07MyzD ihrXwfN4W9Q8HLilWkanxk7aiq86bKUHglAhskxNGOnHeZao/E7RyGYfEa2sTitx da4nImHP+ctJTDYHCImaB/TRJow+XSyn2rcLLaP0LUGkWvlW/+iOJiYLPvVuULDZ YWqMrv7Njm+MQuSjhs6Sr5sZuY72G//HUc5pHQS6ETPjnVuROR8iwu/SxAFhvHnj OFzrKx0lNNGW396yvqz1qcQpnYMhPP7aBC3bUG9CXf+jj/5wTXTZptvvV9EgIaki CkkI/YwYG9auw4SdKKExrohcCbkqksLipn8okPhgPA2vfdK+uAZY9frS+TDXoMeq FxBCjGr3OfJ9na0EbBTL =nYnO -----END PGP SIGNATURE----- --iwhbTEDpuWldV8oAMQ2XavaN95PxssGMq--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?55324E55.1000805>