From owner-freebsd-stable@FreeBSD.ORG  Sun Jul  4 11:50:25 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id B11A016A4CE; Sun,  4 Jul 2004 11:50:25 +0000 (GMT)
Received: from mta10.adelphia.net (mta10.adelphia.net [68.168.78.202])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 548BD43D5C; Sun,  4 Jul 2004 11:50:25 +0000 (GMT)
	(envelope-from Barbish3@adelphia.net)
Received: from barbish ([67.20.101.71]) by mta10.adelphia.net
          (InterMail vM.6.01.03.02 201-2131-111-104-20040324) with SMTP
          id <20040704115023.KCRM12887.mta10.adelphia.net@barbish>;
          Sun, 4 Jul 2004 07:50:23 -0400
From: "JJB" <Barbish3@adelphia.net>
To: "Rob" <stopspam@users.sourceforge.net>,
	<freebsd-stable@freebsd.org>, <freebsd-questions@freebsd.org>
Date: Sun, 4 Jul 2004 07:50:25 -0400
Message-ID: <MIEPLLIBMLEEABPDBIEGCECHGFAA.Barbish3@adelphia.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0)
In-Reply-To: <40E78954.4070401@users.sourceforge.net>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Importance: Normal
Subject: RE: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Barbish3@adelphia.net
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Jul 2004 11:50:25 -0000

Verbose limit is a sysctl knob now, you can display it to see
current setting or change it without a reboot. Check your
newsyslog.conf file to very the rotate trigger is the same as you
were using before.

-----Original Message-----
From: owner-freebsd-questions@freebsd.org
[mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Rob
Sent: Sunday, July 04, 2004 12:37 AM
To: freebsd-stable@freebsd.org; freebsd-questions@freebsd.org
Subject: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?


Hello,

I have one PC with updated kernel/world from June 25th, and another
from June 10th,
all with sources for STABLE.

Both PCs have a firewall. Neither of the two seems to obey the
verbose limit of 100,
that I put in the kernel configuration file.

In the past, /var/log/secure used to rotate once a week or so, but
now it does in
less than 30 minutes due to the overwhelming amount of firewall
logs.

The kernel configuration has following lines, related to the
firewall:

   options IPDIVERT
   options IPFW2           # version 2 IPFW
   options IPFIREWALL      # firewall
   options IPFIREWALL_VERBOSE              # enable logging to
syslogd(8)
   options IPFIREWALL_VERBOSE_LIMIT=100    # limit verbosity
   options IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by
default

and I have in /etc/make.conf:

   IPFW2=TRUE


Any idea what is going wrong here?

Thanks,
Rob.


_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"