Date: Tue, 7 Sep 2004 20:08:14 +0400 (MSD) From: Maxim Konovalov <maxim@macomnet.ru> To: Ryan Sommers <ryans@gamersimpact.com> Cc: freebsd-hackers@freebsd.org Subject: Re: IPFIREWALL_VERBOSE stopped logging? Message-ID: <20040907200411.M26459@mp2.macomnet.net> In-Reply-To: <57396.208.4.77.15.1094567534.squirrel@www2.neuroflux.com> References: <57396.208.4.77.15.1094567534.squirrel@www2.neuroflux.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 7 Sep 2004, 08:32-0600, Ryan Sommers wrote: > I'm trying to figure out why my firewall has stopped logging to > /var/log/security. The last entry was from Aug 17 and there has been at > least one restart and a few hundred thousand packets denied. > > FreeBSD ***** 5.2.1-RELEASE-p8 FreeBSD 5.2.1-RELEASE-p8 #1: Thu Jul 1 > 18:24:26 CDT 2004 root@moleman:/usr/obj/usr/src/sys/MOLEMAN i386 > > (root@node15):~:#ipfw list | tail -2 > 03000 deny log tcp from any to any in via xl0 setup > 65535 deny ip from any to any > > (root@node15):~:#sysctl net.inet.ip.fw > net.inet.ip.fw.enable: 1 > net.inet.ip.fw.autoinc_step: 100 > net.inet.ip.fw.one_pass: 1 > net.inet.ip.fw.debug: 1 > net.inet.ip.fw.verbose: 1 > net.inet.ip.fw.verbose_limit: 0 > (truncated) > > (root@node15):~:#grep security /etc/syslog.conf > security.* /var/log/security > > What am I missing? Previous ipfw rules, 'ipfw sh' instead of 'ipfw list' and a tail of the /var/log/security :-) -- Maxim Konovalov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040907200411.M26459>