From owner-freebsd-questions Tue Jan 9 0:23:18 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82]) by hub.freebsd.org (Postfix) with ESMTP id D8B2237B400 for ; Tue, 9 Jan 2001 00:23:01 -0800 (PST) Received: from rfx-64-6-211-149.users.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net with Microsoft SMTPSVC(5.5.1877.197.19); Tue, 9 Jan 2001 00:21:16 -0800 Received: (from cjc@localhost) by rfx-64-6-211-149.users.reflexcom.com (8.11.0/8.11.0) id f098Mpb84078; Tue, 9 Jan 2001 00:22:51 -0800 (PST) (envelope-from cjc) Date: Tue, 9 Jan 2001 00:22:51 -0800 From: "Crist J. Clark" To: blaz Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ipfw logging Message-ID: <20010109002251.Q95729@rfx-64-6-211-149.users.reflexco> Reply-To: cjclark@alum.mit.edu References: <3A5A7C98.F01A8DF0@satx.rr.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <3A5A7C98.F01A8DF0@satx.rr.com>; from blaz@satx.rr.com on Mon, Jan 08, 2001 at 08:51:04PM -0600 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Jan 08, 2001 at 08:51:04PM -0600, blaz wrote: > greetings, I > > i have the following in /etc/syslog.conf: > > !ipfw > *.* /var/log/ipfwlog > > when i do some testing to see about logging, when I try > to ftp from a paticular site to mine (its been blocked), I > get the response I was looking for in the log file. > > When I try to connect to a server like icq, which I > am blocking at this time, I don't get any ipfw info > in my log.. same thing with pings which are being > denied, but not logged.. not sure why this is.. > > do I need a ipfw statement to log everything? > if so what would that syntax be? much appreciated. You need to have 'log' in the rules, like, ${fwcmd} add deny log udp from any to any in via ${oif} ^^^ -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message