From owner-freebsd-questions  Tue Sep  5 22:40:31 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from baddog.yi.org (24-216-177-184.hsacorp.net [24.216.177.184])
	by hub.freebsd.org (Postfix) with ESMTP id 178C537B422
	for <freebsd-questions@FreeBSD.ORG>; Tue,  5 Sep 2000 22:40:28 -0700 (PDT)
Received: from localhost.necro (localhost.necro [127.0.0.1])
	by baddog.yi.org (Postfix) with ESMTP
	id BC69A44; Wed,  6 Sep 2000 01:41:18 -0400 (EDT)
Date: Wed, 06 Sep 2000 01:41:18 EDT
From: Mike Johnson <ahze@slaughter.necro.edu>
To: Emmanuel Gravel <egravel@earthlink.net>,
	freebsd-questions@FreeBSD.ORG
Subject: Re: Firewall not logging
Reply-To: ahze@slaughter.necro.edu
X-Mailer: Spruce 0.6.5 for X11 w/smtpio 0.7.9
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Message-Id: <20000906054118.BC69A44@baddog.yi.org>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


this is just an example
ipfw add 00307 deny log tcp from any to any 111  in recv dc0
do you have 'log' in the line? and do you have 
security.*                                      /var/log/security
in /etc/syslog.conf ?


On Tue, 05 Sep 2000, Emmanuel Gravel wrote:
> Date: Tue, 05 Sep 2000 22:40:36 -0700
> To: freebsd-questions@FreeBSD.ORG
> From: Emmanuel Gravel <egravel@earthlink.net>
> Subject: Firewall not logging
> 
> My kernel is compiled with IPFIREWALL_VERBOSE,
> and I have some deny rules which should log. However
> when I check /var/log/messages the file remains untouched
> even when packets arrive that get blocked by the rules.
> 
> What am I missing here? I checked the man page for ipfw
> and all seems fine, but it still won't log either to the console
> or to the system logger.
> 
> Thanks!
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message