Logging and IPFW

[Jack L. Stone]

At 09:46 PM 9.9.2003 +0800, chael at southgate.ph.inter.net wrote:
>
>just edit the rules concerned in rc.firewall to add the word "log" to rules
>you want logged.
>
>e.g. -- ${fwcmd} add pass log tcp from any to ${oip} 80 setup
>
>and tail the /var/log/security instead of messages.
>

...and, for its own ipfw log, put this in your syslog.conf,
!ipfw
*.*                                             /var/log/ipfw.log

and then touch the ipfw.log file in /var/log
and then restart syslogd
...then tail that file, or send yourself emails of the log....

Best regards,
Jack L. Stone,
Administrator

SageOne Net
http://www.sage-one.net
jackstone at sage-one.net