[Bug 178482] [ipfw] logging problem from vnet jail

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=178482

joeb1 at a1poweruser.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |joeb1 at a1poweruser.com

--- Comment #6 from joeb1 at a1poweruser.com ---
Now testing 12.0-RC3. vnet jail running on the gateway host. IPF firewall
running on the gateway host and ipfw running in the vnet jail.

Found out about the undocumented ipfw0 log. This works in each vnet jail
logging the vnet jails log records to the /var/log/security.log file in the
vnet jail.

To enable place the normal ipfw statements in the vnet jails rc.conf with these
changes.

firewall_logging="NO"
firewall_logif="YES"
nohup tcpdump -lnti ipfw0 | logger -t jailname -p security.info &

This method should be documented someplace.

-- 
You are receiving this mail because:
You are the assignee for the bug.