pf not logging on 5.3-BETA3 ?
Hugo Silva
klr at 6s-gaming.com
Wed Sep 15 12:56:38 PDT 2004
Hi,
I can't make pf log to a logfile on the 5.3-BETA3. I didn't have any
problems with this on 5.2.1-RELEASE-p9 using the port..
I can access pflog0 and there I will see entries that are matching the
blocks, but I can't tail /var/log/pflog (empty).
I've added device pf, pfsync, pflog to the kernel, and have the following
on rc.conf:
pf_enable="YES"
pf_logd="YES"
pflog_logfile="/var/log/pflog"
pf_rules="/etc/pf.conf"
The ruleset won't load automatically either (I think it should be
pf_conf=, but /etc/defaults/rc.conf shows pf_rules ...). pflogd won't
start, if I start it by hand it won't work either (starts, exits)...
The /var/log/pflog file is there, owned root:wheel. But no entries are
being added to the log. If I try to see it like:
[root at evilreborn:/usr/src/sys/i386/conf]# pflog
tcpdump: WARNING: pflog0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pflog0, link-type PFLOG (OpenBSD pflog file), capture size 96
bytes
it works (btw, i had to ifconfig pflog0 up or it wouldn't work, this is dumb)
But it won't write the blocked/logged entries to the logfile. Am I missing
something obvious here?
Please reply to me as I'm not subsribed to -current or pf
Regards,
Hugo
More information about the freebsd-current
mailing list