On Tue, 04 May 2004 12:34:47 +0200
Jules Colding <[EMAIL PROTECTED]> wrote:
> Hi,
>
> Using pfstat and enabling interface logging with "set loginterface fxp0"
> leaves me with a single question:
>
> Do I need to add the "log" keyword to all filter rules on fxp0 to enable
> logging of the passed/blocked packages?
>
> If yes, should I use "log-all" instead?
pfstat uses all of the information in pfctl -si. So you do not need to specify 'log'
in your rulset. Although you would need to if you planned on monitoring pflogd (i
believe).
Hope this helps,
-cbm
