Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 May 2000 07:22:42 -0700
From:      Ron 'The InSaNe One' Rosson <insane@lunatic.oneinsane.net>
To:        freebsd-stable@freebsd.org
Subject:   Re: Logging for ipfilter under 3.4-STABLE April Build
Message-ID:  <20000531072242.A16064@lunatic.oneinsane.net>
In-Reply-To: <Pine.BSF.4.10.10005310059570.589-100000@hydrant.intranova.net>; from oogali@intranova.net on Wed, May 31, 2000 at 01:00:22AM -0400
References:  <20000530192634.A7881@lunatic.oneinsane.net> <Pine.BSF.4.10.10005310059570.589-100000@hydrant.intranova.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Sorry for not mentioning that this is the ipfilter that was in the 3.4-STABLE
branch in April. Here is how I start ipfilter and ipmon from my startup script
located in /usr/local/etc/rc.d

## IPFilter
/sbin/ipf -Fa -f /etc/ipf.conf
/usr/sbin/ipmon -sn

Yes there is tabs in the entry below for syslog.conf also I made the
correction to the syslog.conf that was mentioned in another email.

Just in case here are the entries in my Kernel config file.

# Enable IPFilter
options         IPFILTER                #kernel ipfilter support
options         IPFILTER_LOG            #ipfilter logging
options         IPSTEALTH

The only option I haven't explored is building ipfilter outside of the base
system. The snags to that are that this system at the moment can only run 3.x
branch of FreeBSD due to driver support for the ETinc serial adapter. So it
does have at least one more cvsup to the "Golden 3.5".

I am in a delimma and can use some advice.

TIA

On Wed, 31 May 2000, Omachonu Ogali was heard blurting out:

> Are you running ipmon with the '-s' argument?
> 
> On Tue, 30 May 2000, Ron 'The InSaNe One' Rosson wrote:
> 
> > I have a 3.4-STABLE build of FreeBSD It is currntly running IPFilter to
> > protect my network. No matter what I have done I can not get ipmon to
> > log to syslog. 
> > 
> > Here is what I have in my syslog.conf:
> > 
> > *.notice;kern.debug;lpr.info;mail.crit;news.err;local0.none /var/log/messages
> > local0.info;local0.debug                        /var/log/ipfilter.log
> > local0.err                                      /var/log/ipfilter.err
> > 
> > TIA
> > 

-- 
------------------------------------------------------------------------------
Ron Rosson          			      ... and a UNIX user said ...
The InSaNe One                 			      rm -rf *
insane@oneinsane.net     	            and all was /dev/null and *void()
------------------------------------------------------------------------------
Heaven and earth regard the ten thousand things as straw dogs, and I feel fine.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000531072242.A16064>