From owner-freebsd-stable  Thu Apr 26  9:27:26 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from el.com.br (srv01.el.com.br [200.217.18.162])
	by hub.freebsd.org (Postfix) with ESMTP id CCAE237B423
	for <stable@freebsd.org>; Thu, 26 Apr 2001 09:27:22 -0700 (PDT)
	(envelope-from g-paiva@el.com.br)
Received: from 0 (localhost.el.com.br [127.0.0.1])
	by el.com.br (el_mail_server) with ESMTP
	id 10F451900; Thu, 26 Apr 2001 13:27:16 -0300 (EST)
Content-Transfer-Encoding: 8bit
X-Face: V|+c;4!|B?E%BE^{E6);aI.[<<r#uCVjK"~Ke!@0vxS/.,wki/c|uVnNV!BA-_gY2sfoGc3 f{#/$PT>97Zd*>^#%Y5Cxv;%Y[PT-LW3;A:fRrJ8+^k"e7@+30g0YD0*^^3jgyShN7o?a]Cla*Zv'5NA,=963bM%J^o]C
Date: Thu, 26 Apr 2001 13:27:14 -0000
Subject: Re: [rara.rasputin@virgin.net: Re: ipfw and quake games]
MIME-Version: 1.0
From: Paiva <g-paiva@el.com.br>
To: "Ricardo Campos Passanezi" <riccp@ige.unicamp.br>
Cc: "Rasputin" <rara.rasputin@virgin.net>,
	"Antonio Carlos Venancio Junior" <floripa@zoing.net>,
	stable@freebsd.org
Content-Type: text/plain; charset=iso-8859-1
User-Agent: IMHO/0.98.2 (Webmail for Roxen)
In-Reply-To: <Pine.BSF.4.31L2.0104260855110.814-100000@netuno.ige.unicamp.br>
Message-Id: <20010426162716.10F451900@el.com.br>
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

You're all lost.

The default syslog configuration saves ipfw messages to
/var/log/security.
Daily the crontab runs the /etc/periodic/daily/450.status-security
that calls /etc/security script which filters and create/saves those
files to be compared every single day, sending the diffs to root.
Simple like that.

-------------------
> Em 26.04.2001, Rasputin escreveu:
> 
> > Date: Thu, 26 Apr 2001 10:27:58 +0100
> > From: Rasputin <rara.rasputin@virgin.net>
> > To: Antonio Carlos Venancio Junior <floripa@zoing.net>
> > Cc: stable@freebsd.org
> > Subject: Re: [rara.rasputin@virgin.net: Re: ipfw and quake games]
> >
> > * Antonio Carlos Venancio Junior <floripa@zoing.net> [010425
16:23]:
> >
> > >         I just have a quick question: what is the ipfw logfile
name?
> > > ipfw.today/ipfw.yesterday?
> >
> > No idea, sorry. I use IPF. But I imagine it would dod some kind of
> > logging by default, check rc.firewall to see.
> 
> I think ipfw.[to|yester]day has the statistics for the ipfw and the
> security has the logging. In general. If you look in the
/etc/syslog.conf,
> you can see where things go...
> 
> Ricardo.
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-stable" in the body of the message
> 
-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Paiva, Gilson de        Domingos Martins
 mailto:npd@el.com.br    Brazil 
 http://www.el.com.br/   E&L Producoes de Software
 http://www.FreeBSD.org/ FreeBSD: The Power to Serve
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message