From owner-freebsd-doc@freebsd.org Mon Mar 21 15:38:29 2016 Return-Path: Delivered-To: freebsd-doc@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DF309AD8F13 for ; Mon, 21 Mar 2016 15:38:29 +0000 (UTC) (envelope-from cwjordandt@gmail.com) Received: from mail-lf0-x22a.google.com (mail-lf0-x22a.google.com [IPv6:2a00:1450:4010:c07::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 697262D2 for ; Mon, 21 Mar 2016 15:38:29 +0000 (UTC) (envelope-from cwjordandt@gmail.com) Received: by mail-lf0-x22a.google.com with SMTP id d82so64411355lfe.3 for ; Mon, 21 Mar 2016 08:38:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=BpjgOTFLSPNqTUXutSXtz0xGsWz2WfdQFDptyVGIZsg=; b=by7ibiGUtOYXxAyjxY3ZAS4zr79htgQlQuzsu3eUx2kcOMwRjdU4q9ZyVklOMfY66+ U520DLoVgFYWHOxbZpoaELqYqMf6pTTmcUvYLzPijfwh2SCSgZUODB3071MCwxPyxYcN 4m1hAqBIvUNebinbRro+glDCXNWx6J5PBA5WhspyLS40yLbiQk71koBrBZ7y2FrQwpaU CtflYkTMICjD9b8xYVAzcwvNzOjbOoq97rN+y5doXuSV7FAF8qGXuAFdMVmibxzIbTkZ u0ic5kxepHbKogoj57ayUDYYbBewoKB0VdZtv/I/YSFlfk2kdcf1mXqjJJD+Ckd9CyOK Q7EA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=BpjgOTFLSPNqTUXutSXtz0xGsWz2WfdQFDptyVGIZsg=; b=euAimIwYB3TxXOnYcn/er+/d80UQbfcQZjVKgsK/YRJnNc2ZfexMPbXuzS+Y5zhZV8 napo+N/0ast82dP+lvFRbs6aJFvtL81t4r2z+/psFXykVBEbMZJyM6zR0GgFDx/KsLOL EjtU/rHaZU++Bl02q9W3WMfjjYAS+RbcCrMeyfhTp/Cc+cTBA3nzKNdPwU7SDvbPhzzL UUQOaeMLhh+fhoQzWcfii5JDXUNVRnj4e/XYgEIoYlDlzx9r40c5vg88dlU05Z6XFfzE ylAJrgUZEUmsDSWd0IM/XveWGEfzidmhbNVsOYsBvj/1ieJeoAQ3UKQF5iyivhfkctFZ 3unQ== X-Gm-Message-State: AD7BkJLNQXPfBalboiBqkC65XhbnWrlEK5WunkYmPxy6YPVZGaVmfUFGnv988tLwPh71SOKYxnGFtFXpef+Y1A== MIME-Version: 1.0 X-Received: by 10.25.39.142 with SMTP id n136mr3359853lfn.50.1458574707812; Mon, 21 Mar 2016 08:38:27 -0700 (PDT) Received: by 10.25.170.198 with HTTP; Mon, 21 Mar 2016 08:38:27 -0700 (PDT) Date: Mon, 21 Mar 2016 11:38:27 -0400 Message-ID: Subject: Handbook section 29.4.1 Enabling IPFW From: Chris Jordan To: freebsd-doc@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.21 X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2016 15:38:30 -0000 I'm coming back to FreeBSD after many years away and I am setting up a new system with 10-2-release. I was reading through Handbook section 29.4.1 "Enabling IPFW" and it says: "To enable logging, include this line in /etc/rc.conf: firewall_logging="YES"". That didn't seem to work for me, so I went looking through /etc/rc.firewall, and found it's looking for a line like "firewall_logdeny="YES" instead, but it's only checking for that for the case where firewall_type="workstation". That works fine, but it's not documented in either the handbook page or the rc.conf(5) man page. Before I submit a problem report, I wanted to check here if I'm missing something (maybe it's a deprecated option or something?). Chris Jordan cwjordandt@gmail.com