freebsd stable - Jul 2004 - IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?

Hello,

I have one PC with updated kernel/world from June 25th, and another from June
10th,
all with sources for STABLE.

Both PCs have a firewall. Neither of the two seems to obey the verbose limit of
100,
that I put in the kernel configuration file.

In the past, /var/log/secure used to rotate once a week or so, but now it does
in
less than 30 minutes due to the overwhelming amount of firewall logs.

The kernel configuration has following lines, related to the firewall:

   options IPDIVERT
   options IPFW2           # version 2 IPFW
   options IPFIREWALL      # firewall
   options IPFIREWALL_VERBOSE              # enable logging to syslogd(8)
   options IPFIREWALL_VERBOSE_LIMIT=100    # limit verbosity
   options IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by default

and I have in /etc/make.conf:

   IPFW2=TRUE


Any idea what is going wrong here?

Thanks,
Rob.

Verbose limit is a sysctl knob now, you can display it to see
current setting or change it without a reboot. Check your
newsyslog.conf file to very the rotate trigger is the same as you
were using before.

-----Original Message-----
From: owner-freebsd-questions@freebsd.org
[mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Rob
Sent: Sunday, July 04, 2004 12:37 AM
To: freebsd-stable@freebsd.org; freebsd-questions@freebsd.org
Subject: IPFIREWALL_VERBOSE_LIMIT ignored by recent kernel/world?


Hello,

I have one PC with updated kernel/world from June 25th, and another
from June 10th,
all with sources for STABLE.

Both PCs have a firewall. Neither of the two seems to obey the
verbose limit of 100,
that I put in the kernel configuration file.

In the past, /var/log/secure used to rotate once a week or so, but
now it does in
less than 30 minutes due to the overwhelming amount of firewall
logs.

The kernel configuration has following lines, related to the
firewall:

   options IPDIVERT
   options IPFW2           # version 2 IPFW
   options IPFIREWALL      # firewall
   options IPFIREWALL_VERBOSE              # enable logging to
syslogd(8)
   options IPFIREWALL_VERBOSE_LIMIT=100    # limit verbosity
   options IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by
default

and I have in /etc/make.conf:

   IPFW2=TRUE


Any idea what is going wrong here?

Thanks,
Rob.


_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"