From owner-freebsd-questions  Thu Feb 22  1:16:11 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from whale.sunbay.crimea.ua (whale.sunbay.crimea.ua [212.110.138.65])
	by hub.freebsd.org (Postfix) with ESMTP id 8C0E937B491
	for <freebsd-questions@FreeBSD.ORG>; Thu, 22 Feb 2001 01:15:57 -0800 (PST)
	(envelope-from ru@whale.sunbay.crimea.ua)
Received: (from ru@localhost)
	by whale.sunbay.crimea.ua (8.11.0/8.11.0) id f1M9Fi246058;
	Thu, 22 Feb 2001 11:15:44 +0200 (EET)
	(envelope-from ru)
Date: Thu, 22 Feb 2001 11:15:44 +0200
From: Ruslan Ermilov <ru@FreeBSD.ORG>
To: Kathy Quinlan <katinka@magestower.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Natd errors
Message-ID: <20010222111544.C36846@sunbay.com>
Mail-Followup-To: Kathy Quinlan <katinka@magestower.com>,
	freebsd-questions@FreeBSD.ORG
References: <00f901c09c73$7e036e20$fe00a8c0@kat.lan> <007001c09c81$9de33000$0d01a8c0@casystems.net> <001001c09c82$9980a3c0$fe00a8c0@kat.lan>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <001001c09c82$9980a3c0$fe00a8c0@kat.lan>; from katinka@magestower.com on Thu, Feb 22, 2001 at 11:50:27AM +0800
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Thu, Feb 22, 2001 at 11:50:27AM +0800, Kathy Quinlan wrote:
> I have the following option in my kernel :
> 
> options         IPFIREWALL_VERBOSE
> 
> but I still do not see which rule is causing it
> 
> any ideas ?
> 
Make sure that all ``deny'' rules have the ``log'' keyword.
Without this, IPFIREWALL_VERBOSE makes no effect.

> or is their a log file somewhere that logs these errors ?
> or can I redirect these errors to a file, as all I get in /va/log/messages
> and on the console is the natd104 error and not a rule # responsible.
> 
ipfirewall ``log'' messages are logged by syslogd(8) to /var/log/security
by default, see /etc/syslog.conf.

> also is their a list of error messages anywhere ?
> like if I get an error how do I find what it is as like the natd104 was not
> very helpful.
> 


Cheers,
-- 
Ruslan Ermilov		Oracle Developer/DBA,
ru@sunbay.com		Sunbay Software AG,
ru@FreeBSD.org		FreeBSD committer,
+380.652.512.251	Simferopol, Ukraine

http://www.FreeBSD.org	The Power To Serve
http://www.oracle.com	Enabling The Information Age

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message