Problems logging w/ IPF on FreeBSD 5.3-STABLE
Joe Kraft
hishadow at netcabo.pt
Fri Jan 28 13:29:15 PST 2005
Nelis Lamprecht wrote:
> On Mon, 29 Nov 2004 18:28:06 -0800, FMorales <altf2o at comcast.net> wrote:
>
>
>>bash-2.05b$ cat /etc/rc.conf | grep "ip"
>>ipfilter_enable="YES"
>>ipfilter_rules="/etc/ipf.rules"
>>ipmon_enable="YES"
>>ipmon_flags="-Ds"
>>
>
>
> change the above to read something along the lines of:
>
> ipmon_flags="-Dn /var/log/ipfilter.log"
>
> remove the "s" in other words and put in the path to your log file to
> output the data.
>
I have the same problem with my logs in 5.3, but I would like them to
run through syslogd because I would like them written to another machine
also. The same syslog.conf worked find on 4.10.
The following /etc/syslog.conf results in firewall logs going to
messages and security but not firewall.log and not remotely to kara.
local0.* /var/log/firewall.log
*.err;kern.debug;auth.notice;mail.crit /dev/console
*.notice;authpriv.none;kern.debug;local0.none;lpr.info;mail.crit;news.err
/var/log/messages
security.* /var/log/security
auth.info;authpriv.info /var/log/auth.log
mail.info /var/log/maillog
lpr.info /var/log/lpd-errs
ftp.info /var/log/xferlog
cron.* /var/log/cron
*.=debug /var/log/debug.log
*.emerg *
local0.* @kara
If I give the command 'logger -p local0.notice "where does this go" '
the log goes to the local and remote machines.
What am I missing? Did ipmon start forwarding to a different service?
Joe.
More information about the freebsd-questions
mailing list