ipfilter.log

[bob at a1poweruser.com]

The answer is very simple. The integration of the open source
ipfilter firewall into FreeBSD has changed between the 4.x releases
and the 5.3 release just made available. If you change the
syslog.conf:

 Local0.*           /var/log/ipfilter.log          which is how 4.10
& 4.11  work

To

security.*        /var/log/ipfilter.log        for 5.3 then every
thing will work as documented.

-----Original Message-----
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of Francis
Whittington
Sent: Sunday, April 03, 2005 9:29 PM
To: freebsd-questions at freebsd.org
Subject: ipfilter.log

Hi guys,
    I've been following this guide:
http://www.unixguide.net/freebsd/fbsd_installguide/index.php
So far I have gotten the firewall/router to work. Everything seems
to be okay, except I do not see anything being logged in
ipfilter.log. My rc.conf options are:

moused_enable="YES"
moused_port="/dev/psm0"
moused_type="auto"
moused_flags="-m 2=3"
allscreens_flags="-m on -c blink -h 200"
clear_tmp_enable="YES"
hostname="gateway.fbsdbuds.com"
saver="logo"
ifconfig_rl0="DHCP"
ipfilter_enable="YES"
ipfilter_rules="/etc/ipf.rules"
ipmon_enable="YES"
ipmon_flags="-Ds"
ipnat_enable="YES"
ipnat_rules="/etc/ipnat.rules"
ifconfig_rl1="inet 10.0.10.2 netmask 255.255.255.248"
gateway_enable="YES"

I am using ipf.rules and ipnat.rules. I created ipfilter.log in
/var/log/ and I added this line to syslog.conf:
    Local0.* /var/log/ipfilter.log
and I added the following line to newsyslog.conf for rotating the
log.
/var/log/ipfilter.log       600  5      100     $M1D0  J
I was wondering if anyone could tell me why I do not get anything in
my ipfilter.log.

                                                       Thanks
                                                      fewjr/Buddy
_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"