Date: Thu, 29 May 2003 09:40:23 +0300 From: Peter Pentchev <roam@ringlet.net> To: "Simon L. Nielsen" <simon@nitro.dk> Cc: security@freebsd.org Subject: Re: FW: Question about logging. Message-ID: <20030529064023.GB1676@straylight.oblivion.bg> In-Reply-To: <20030528211038.GB3741@nitro.dk> References: <20030528201417.GA3741@nitro.dk> <20030528233144.R52694-100000@doppelganger.el.ntu-kpi.kiev.ua> <20030528211038.GB3741@nitro.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Wed, May 28, 2003 at 11:10:39PM +0200, Simon L. Nielsen wrote: > On 2003.05.28 23:39:54 +0300, Taras Y. NIZHNIK wrote: > > On Wed, 28 May 2003, Simon L. Nielsen wrote: > > > > This would match log entries generated by a userland application named > > > > 'ipfw'. The ipfw log lines are, however, generated by the *kernel*, and > > > > they would never match this rule. > > > Ehh, I have the following in my syslog.conf, and it works just fine : > > > > > > !ipfw > > > *.* /var/log/ipfw.log > > > > > > I only get lines like : > > > May 20 02:16:28 arthur /kernel: ipfw: 65300 Deny UDP 192.168.3.2:53 192.168.2.3:49239 in via xl0 > > > in var/log/ipfw.log > > > > > > I guess it shouldn't work, but it does :-) > > Why do you think it should not? > > Actually only bacuse Peter Pentchev said it shouldn't, and I didn't read > the manual page carefully enough before posting. > > Thanks for correcting me. Erm.. well.. what can I say :) It's great that there are still people who actually read the manpages, and not just those like me who go with vague memories :) Sorry for the confusion. G'luck, Peter -- Peter Pentchev roam@ringlet.net roam@sbnd.net roam@FreeBSD.org PGP key: http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint FDBA FD79 C26F 3C51 C95E DF9E ED18 B68D 1619 4553 If I were you, who would be reading this sentence? [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE+1atX7Ri2jRYZRVMRAgESAJwJVBzktjo1rQ1D3AZM2TB+x0Ft3ACePt/A yJMVXH35F6DpkYg89U4gxfA= =9zNN -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030529064023.GB1676>