ipf not loging (5.2.1)

John Murphy jfm at blueyonder.co.uk
Mon Apr 26 17:00:38 PDT 2004


I'm stumped.  Can't seem to get ipf/ipmon to log to /var/log/ipflog
(FreeBSD 5.2.1-Release)

In /etc/rc.conf I have:
ipfilter_enable="YES"
ipfilter_program="/sbin/ipf"
ipfilter_rules="/etc/ipf.rules"
ipfilter_flags=""

ipnat_enable="YES"
ipnat_program="/sbin/ipnat"
ipnat_rules="/etc/ipnat.rules"
ipnat_flags=""

ipmon_enable="YES"
ipmon_program="/sbin/ipmon"
ipmon_flags="-D /var/log/ipflog"

The end of dmesg says:
IP Filter: v3.4.31 initialized.  Default = pass all, Logging = enabled

I've touched and chmoded /var/log/ipflog so it looks like:
-rw-rw-rw-  1 root  wheel  0 Apr 26 23:23 /var/log/ipflog

And I've used trafshow to see packets which should be logged but
/var/log/ipflog remains empty.  Any hints welcome.

-- 
John.


More information about the freebsd-questions mailing list