From owner-freebsd-security  Mon Sep 17  7:13:27 2001
Delivered-To: freebsd-security@freebsd.org
Received: from rip.psg.com (rip.psg.com [147.28.0.39])
	by hub.freebsd.org (Postfix) with ESMTP id C3FA437B405
	for <freebsd-security@freebsd.org>; Mon, 17 Sep 2001 07:13:23 -0700 (PDT)
Received: from randy by rip.psg.com with local (Exim 3.33 #1)
	id 15iz9H-000GIu-00
	for freebsd-security@freebsd.org; Mon, 17 Sep 2001 07:13:23 -0700
From: Randy Bush <randy@psg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: freebsd-security@freebsd.org
Subject: Re: ipfw logging to dmesg not /var/log/syslog
References: <E15iyX4-000FBj-00@rip.psg.com>
	<177251395818.20010917174352@internethelp.ru>
Message-Id: <E15iz9H-000GIu-00@rip.psg.com>
Date: Mon, 17 Sep 2001 07:13:23 -0700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> why is ipfw's logging in dmesg as opposed to /var/log/security?

removing the logamount subclause seemed to fix it

> 00600    7886   2583885 deny log logamount 100 icmp from any to 666.42.0.39 icmptype 8

possible interation with that subclause and the limit compiled in the
kernel?

options         IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity

randy

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message