I've installed ip-filter on my Solaris 9 X86 system and setup the configuration file as I wanted. I have the following general set of rules at the top of my config file to block and log anything unless explicitly stated otherwise. Despite this rule, nothing is getting logged. IP-filter is working in that it's definitely blocking what I want blocked but it's not logging it as I would expect it to. I have this same line on a Solaris 9 Sparc install and it logs to /var/adm/messages just fine. Any ideas here on what the problem may be? Ipmon is running with the -s flag.
# access denied unless explicitly permitted
block in log from any to any
block out log from any to any
Bill Smith
<mailto:[EMAIL PROTECTED]
ISS Systems Server Group
Johns Hopkins University Applied Physics Laboratory
11100 Johns Hopkins Road
Laurel, MD 20723
Phone: 443-778-5523
Web: http://www.jhuapl.edu
