Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 13 Jan 2001 23:20:06 -0800 (PST)
From:      opentrax@email.com
To:        Noah@oopz.com
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: logging
Message-ID:  <200101140720.XAA00629@spammie.svbug.com>
In-Reply-To: <A6A82340FB3DB643A0678E3B10CD5AC13FE0@xela.oopz.com>

next in thread | previous in thread | raw e-mail | index | archive | help


On 10 Jan, Noah Davidson wrote:
> I am trying to upgrade from FreeBSD 3.4 to FreeBSD 4-2.  Basically all I
> have going here is a single rule.
> 
> /sbin/ipfw add 500 allow log all from any to any
> 
> This should log every packet as it goes through the box.  but in only
> logs certain packets.  When I kill syslogd it seams to log every packet
> as I would expect, but since syslogd is no longer running in just logs
> to the console and no where else.  When I manually start syslogd the
> logging stops again.  How can I get ipfw to work and log packets.
> 
Let's go through the steps:

1) does /var/log/ipfw.log exist
2) did you add enter to /etc/syslog.conf
3) did you place compile your kernel with the following:

options         IPFIREWALL_VERBOSE      #print information about 
                                        # dropped packets
options         IPFIREWALL_FORWARD      #enable transparent proxy support
options         "IPFIREWALL_VERBOSE_LIMIT=100" #limit verbosity
options         IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default

4) specifically did you set IPFIREWALL_VERBOSE_LIMIT

				Jessem.






To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200101140720.XAA00629>