From owner-freebsd-bugs@FreeBSD.ORG  Mon Feb  9 10:50:21 2004
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E4C3016A51A
	for <freebsd-bugs@hub.freebsd.org>;
	Mon,  9 Feb 2004 10:50:21 -0800 (PST)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CB4AB43D31
	for <freebsd-bugs@hub.freebsd.org>;
	Mon,  9 Feb 2004 10:50:21 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	i19IoLbv080993	for <freebsd-bugs@freefall.freebsd.org>;
	Mon, 9 Feb 2004 10:50:21 -0800 (PST)
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.12.10/8.12.10/Submit) id i19IoL2X080992;
	Mon, 9 Feb 2004 10:50:21 -0800 (PST)
	(envelope-from gnats)
Resent-Date: Mon, 9 Feb 2004 10:50:21 -0800 (PST)
Resent-Message-Id: <200402091850.i19IoL2X080992@freefall.freebsd.org>
Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer)
Resent-To: freebsd-bugs@FreeBSD.org
Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org,
	joe <barbish3@adelphia.net>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DB4D816A4CE
	for <freebsd-gnats-submit@FreeBSD.org>;
	Mon,  9 Feb 2004 10:45:59 -0800 (PST)
Received: from www.freebsd.org (www.freebsd.org [216.136.204.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id DA2DA43D31
	for <freebsd-gnats-submit@FreeBSD.org>;
	Mon,  9 Feb 2004 10:45:59 -0800 (PST)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.12.10/8.12.10) with ESMTP id i19Ijv72041996
	for <freebsd-gnats-submit@FreeBSD.org>;
	Mon, 9 Feb 2004 10:45:57 -0800 (PST)
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.12.10/8.12.10/Submit) id i19IjvEU041995;
	Mon, 9 Feb 2004 10:45:57 -0800 (PST)
	(envelope-from nobody)
Message-Id: <200402091845.i19IjvEU041995@www.freebsd.org>
Date: Mon, 9 Feb 2004 10:45:57 -0800 (PST)
From: joe <barbish3@adelphia.net>
To: freebsd-gnats-submit@FreeBSD.org
X-Send-Pr-Version: www-2.0
Subject: kern/62598: no logging on ipfw loadable module
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Feb 2004 18:50:22 -0000


>Number:         62598
>Category:       kern
>Synopsis:       no logging on ipfw loadable module
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Feb 09 10:50:21 PST 2004
>Closed-Date:
>Last-Modified:
>Originator:     joe
>Release:        4.9
>Organization:
>Environment:
>Description:
   By original design, it's not suppose to be an mandatory requirement that you enable IPFW by compiling it's options into your customized FBSD kernel. IPFW is included in the basic FBSD install as a separate run time loadable module. For some unknown reason the loadable module was compiled with, logging disabled This means the loadable IPFW module has absolutely no logging available. This configuration is non-logical, does not reflect the needs of the majority of IPFW users, and is pretty much useless. A firewall without logging ability is just plain unheard of.     
>How-To-Repeat:
    Nothing to repeat, FBSD is delivered that way.  
>Fix:
In the next stable version release compile the ipfw loadable module with "options IPFIREWALL_VERBOSE" and "options FIREWALL_VERBOSE_LIMIT=5"


>Release-Note:
>Audit-Trail:
>Unformatted: