From owner-freebsd-questions Fri Apr 13 10:16:52 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail.urx.com (mail.urx.com [63.170.19.36]) by hub.freebsd.org (Postfix) with ESMTP id 582A637B424 for ; Fri, 13 Apr 2001 10:16:49 -0700 (PDT) (envelope-from kstewart@urx.com) Received: from urx.com [206.159.132.160] by mail.urx.com with ESMTP (SMTPD32-6.06) id A47F154F02A0; Fri, 13 Apr 2001 10:16:47 -0700 Message-ID: <3AD7347F.C2D8C09B@urx.com> Date: Fri, 13 Apr 2001 10:16:47 -0700 From: Kent Stewart Reply-To: kstewart@urx.com Organization: Dynacom X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Dru Cc: questions@freebsd.org Subject: Re: ipfw logging References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Dru wrote: > > Have ipfw running fine on 4.2-Release, it logs beautifully to the console > the packets that I would expect to see logged. However, I must be missing > something obvious as it refuses to log to a file. Here's the appropriate > lines that I've added to: Did you look at what is being logged to /var/log/security? Kent > > /etc/rc.conf > firewall_logging_enable="YES" > > /etc/syslog.conf > !ipfw > *.* /var/log/ipfwlog > > I added those 2 lines at the bottom of syslog.conf and I used TABs, not > spaces. > > I then "touch"ed /var/log/ipfwlog, and have left the default permissions > on for the moment: > > ls -l /var/log/ipfwlog > -rw-r--r-- 1 root wheel 0 Apr 13 12:58 /var/log/ipfwlog > > Am I missing a typo or something, or have I forgotten to add another line > someplace? I've "hup"ped syslogd umpteen times, not to mention re-booting > several times. > > TIA, > > Dru > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Kent Stewart Richland, WA mailto:kbstew99@hotmail.com http://kstewart.urx.com/kstewart/index.html FreeBSD News http://daily.daemonnews.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message