Logging and IPFW

[John Birrell]

On Tue, Sep 09, 2003 at 12:34:47PM +0100, Wayne Pascoe wrote:
> However, I am still not seeing anything in /var/log/messages when I
> portscan the machine. The firewall appears to be working, as we receive
> nothing back on the portscanning machine, but I would like logging
> enabled. 

Have you added the 'log' keyword to your rules?

e.g:

        # Reject&Log all setup of incoming connections from the outside
        ${fwcmd} add deny log tcp from any to any in via ${oif} setup

The log entries will be written to /var/log/security.

-- 
John Birrell