From owner-freebsd-pf@FreeBSD.ORG Thu Sep 16 19:27:06 2004 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5B53D16A4D6 for ; Thu, 16 Sep 2004 19:27:06 +0000 (GMT) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.187]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8759443D3F for ; Thu, 16 Sep 2004 19:27:05 +0000 (GMT) (envelope-from max@love2party.net) Received: from [212.227.126.162] (helo=mrelayng.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1C81to-0002Bk-00; Thu, 16 Sep 2004 21:26:33 +0200 Received: from [217.227.157.191] (helo=donor.laier.local) by mrelayng.kundenserver.de with asmtp (TLSv1:RC4-MD5:128) (Exim 3.35 #1) id 1C81to-0003TC-00; Thu, 16 Sep 2004 21:26:32 +0200 From: Max Laier To: "Thomas T. Veldhouse" Date: Thu, 16 Sep 2004 21:25:16 +0200 User-Agent: KMail/1.7 References: <58653.81.84.174.8.1095267239.squirrel@81.84.174.8> <4149C2E0.6000902@dequim.ist.utl.pt> <4149E738.8090300@veldy.net> In-Reply-To: <4149E738.8090300@veldy.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart273841372.Is05Z0NqrX"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200409162125.26588.max@love2party.net> X-Provags-ID: kundenserver.de abuse@kundenserver.de auth:61c499deaeeba3ba5be80f48ecc83056 cc: Hugo Silva cc: freebsd-pf@freebsd.org Subject: Re: pf not logging on 5.3-BETA3 ? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Sep 2004 19:27:06 -0000 --nextPart273841372.Is05Z0NqrX Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Thursday 16 September 2004 21:19, Thomas T. Veldhouse wrote: > Bruno Afonso wrote: > > Thomas T. Veldhouse wrote: > >> Max Laier wrote: > >>> Okay, have you guys read UPDATING? > >> > >> Yes, but it is from a BETA3 install ... so the user/group was already > >> their. Besides, installworld will fail unless this group is added > >> first. > > > > Did you do "mergemaster -p" ? > > Yes. But like I said, it is not required to move from 5.3-BETA3 to > RELENG_5 as the changes in master.passwd and group are already there. > If they were not, an installworld would fail because the chown or chgrp > commands fail trying to set the user or group to _pflogd or authpf (group= ). > > In any event, my passwd and group file are indeed up to date and > /var/log/pflog broken (no logging taking place). > > fuggle# ps aux | grep pf > root 340 0.0 0.3 1584 612 ?? Ss 3:05PM 0:00.01 pflogd: > [priv] ( > _pflogd 343 0.0 0.3 1648 652 ?? S 3:05PM 0:11.14 pflogd: > [running > root 21395 0.0 0.1 440 224 p1 R+ 2:18PM 0:00.00 grep pf Are you sure that you have logging rules in place? And are you sure that th= ese=20 rules are matched? Please attach the output of "$pfctl -vvsr" if in doubt. Also, are you using the module or did you build pf into your kernel directl= y?=20 Did you put in "device pflog" as well? What does "$ifconfig pflog0" say? =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart273841372.Is05Z0NqrX Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQBBSeimXyyEoT62BG0RAl6bAJ4xo35BEHzsynl/n5fKtCsfCqjSngCcDJfB jUE5HFVYeg3CQ//bhCm+Dos= =4kx0 -----END PGP SIGNATURE----- --nextPart273841372.Is05Z0NqrX--