From owner-freebsd-pf@FreeBSD.ORG  Wed Nov  7 03:15:27 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 7EB5C16A418
	for <freebsd-pf@freebsd.org>; Wed,  7 Nov 2007 03:15:27 +0000 (UTC)
	(envelope-from syleishere@hotmail.com)
Received: from bay0-omc1-s35.bay0.hotmail.com (bay0-omc1-s35.bay0.hotmail.com
	[65.54.246.107])
	by mx1.freebsd.org (Postfix) with ESMTP id 69EAB13C491
	for <freebsd-pf@freebsd.org>; Wed,  7 Nov 2007 03:15:27 +0000 (UTC)
	(envelope-from syleishere@hotmail.com)
Received: from BAY102-W42 ([64.4.61.142]) by bay0-omc1-s35.bay0.hotmail.com
	with Microsoft SMTPSVC(6.0.3790.3959); 
	Tue, 6 Nov 2007 19:03:14 -0800
Message-ID: <BAY102-W424CD18B3B5DA8713FEECFCC8A0@phx.gbl>
X-Originating-IP: [24.79.240.75]
From: syle ishere <syleishere@hotmail.com>
To: <freebsd-pf@freebsd.org>
Date: Tue, 6 Nov 2007 21:03:14 -0600
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 07 Nov 2007 03:03:14.0485 (UTC)
	FILETIME=[BCF7C650:01C820EA]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: pflogd not logging certain rules
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Nov 2007 03:15:27 -0000


pass in log proto { tcp, udp } from any to $ext_if port { 21, 22 } flags S/=
SA keep state \(max-src-conn 5, max-src-conn-rate 5/60, overload <bad> flus=
h global)
=20
I use the "pass in LOG" here and it does not log at all.
I go connect to port 21 or 22 and watch logs and nothing.
My other logging rules do work for things like:
pass in log proto tcp from any to $ext_if port 25 keep state
=20
So i know the logging actually does work, but the first line does not, any =
ideas?
=20
Dan.
=20
=20
_________________________________________________________________
Send a smile, make someone laugh, have some fun! Start now!
http://www.freemessengeremoticons.ca/?icid=3DEMENCA122=