Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Apr 2004 00:13:43 -0400
From:      "dave" <dmehler26@woh.rr.com>
To:        <freebsd-questions@freebsd.org>
Subject:   ipmon logging as well
Message-ID:  <000201c42cd7$32100d00$0200a8c0@satellite>
References:  <20040427165617.736E016A4EB@hub.freebsd.org> <Pine.LNX.4.56.0404271548360.6243@Mira.dandy.net> <408EC09C.3010407@elvandar.org> <Pine.LNX.4.56.0404271625500.16311@Mira.dandy.net> <408EC59D.3070503@elvandar.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello,
    I'm also atempting to get ipmon to log properly to a file
/var/log/ipf.log. My thanks for the recent traffic on this subject,
unfortunately it has not worked in my case. My system is a 5.2.1 box, it
does not run ipnat just ipfilter and ipmon. I've got:
options IPFILTER
options IPFILTER_LOG
options IPFILTER_DEFAULT_BLOCK
compiled in to my kernel. And in rc.conf:
ipfilter_enable="YES"
ipfilter_rules="/etc/ipf.rules"
ipfilter_flags="" (Note, i thought this one was suppose to resolve a problem
of a duplicate ipfilter startup message, about already being initialized?)
ipmon_enable="YES"
ipmon_flags="-D /var/log/ipf.log"
In the /etc/rc.d/ipfilter script i added ipmon to the end of the require:
line and in the ipmon script i added ipfilter. On boot i get a message that
says enabling ipfilter, default = block all, logging = enabled. A little
later i get the message:
Enabling ipfilter
ioctl(SIOCIPFL6):Invalid argument
and it does not work.
    Suggestions welcome, also when i get this working i'd like for newsyslog
to rotate this log file, but the last time i tried this newsyslog rotated
the file yet kept the original pointer open and kept logging to the old
file.
Thanks.
Dave.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000201c42cd7$32100d00$0200a8c0>