ipfw2 logging

Zoran Kolic
Sat, 01 Nov 2003 22:23:11 -0000

Dear list!
I have a little problem, trying
to enable logging of deny rule.
I have enabled it via kernel:

options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=3

It is ipfw2. After that, my inten-
tion was to use syslogd and

!ipfw
*.*       /var/log/ipfw.log

and newsyslog with

/var/log/ipfw.log  600 3 100   *   J

In rc.conf I have

firewall_enable="YES"
firewall_logging="YES"

Well! Firewall works, I have data
with "ipfw show", but there is no
log. My intentioned rule is

add 65535 deny log all from any to any

It should work, but is does not.
What I am doing wrong?
With no syslogd and newsyslog, log
would be in "messages" file in
/var/log directory?

                   ZK