Re: pf not logging to /var/log/pflog...

2006-01-10 Thread Otto Moerbeek
On Mon, 9 Jan 2006, Olivier Mehani wrote: > On Mon, Jan 09, 2006 at 08:37:04PM +0100, Otto Moerbeek wrote: > > > adsl: > > >! sh -c "/sbin/ifconfig pflog0 up" > > As far as I remember, it's not necessary to ifconfig pflog0 up to use it. > > > Why enable pf only when the link is up? It's

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Russell Fulton
Olivier Mehani wrote: > On Mon, Jan 09, 2006 at 08:37:04PM +0100, Otto Moerbeek wrote: >>> adsl: >>>! sh -c "/sbin/ifconfig pflog0 up" > > As far as I remember, it's not necessary to ifconfig pflog0 up to use it. > >> Why enable pf only when the link is up? It's non-standard and >> potent

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Olivier Mehani
On Mon, Jan 09, 2006 at 08:37:04PM +0100, Otto Moerbeek wrote: > > adsl: > >! sh -c "/sbin/ifconfig pflog0 up" As far as I remember, it's not necessary to ifconfig pflog0 up to use it. > Why enable pf only when the link is up? It's non-standard and > potentially dangarous. You're better o

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Matthias Kilian
On Mon, Jan 09, 2006 at 07:43:29PM +, poncenby smythe wrote: > Making PF=YES in /etc/rc.conf does not seem to work as required due > to my pf complaining it cannot determine an ip address for the tun0 > interface [...] Put it with parentheses, i.e. `(tun0)'. Ciao, Kili

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Otto Moerbeek
On Mon, 9 Jan 2006, poncenby smythe wrote: > On 9 Jan 2006, at 19:37, Otto Moerbeek wrote: > > > > > On Mon, 9 Jan 2006, poncenby smythe wrote: > > > > > On 9 Jan 2006, at 10:43, Olivier Mehani wrote: > > > > > > > On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > > > > > I am

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread poncenby smythe
On 9 Jan 2006, at 19:37, Otto Moerbeek wrote: On Mon, 9 Jan 2006, poncenby smythe wrote: On 9 Jan 2006, at 10:43, Olivier Mehani wrote: On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging the packets I'

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Otto Moerbeek
On Mon, 9 Jan 2006, poncenby smythe wrote: > On 9 Jan 2006, at 10:43, Olivier Mehani wrote: > > > On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > > > I am running 3.8 GENERIC on i386 and can't figure out why pf isn't > > > logging > > > the packets I've told it to, here is a sn

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Matthias Kilian
On Mon, Jan 09, 2006 at 07:21:51PM +, poncenby smythe wrote: > pf is set to NO in /etc/rc.conf, but is enabled with the following > commands in ppp.linkup script: If you enable pf manually, you've also to configure pflog0 up and to start pflogd(8) manually. But it would be much better to ju

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Jason Crawford
On 1/9/06, poncenby smythe <[EMAIL PROTECTED]> wrote: > On 9 Jan 2006, at 10:43, Olivier Mehani wrote: > > > On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > >> I am running 3.8 GENERIC on i386 and can't figure out why pf > >> isn't logging > >> the packets I've told it to, here

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread poncenby smythe
On 9 Jan 2006, at 10:43, Olivier Mehani wrote: On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging the packets I've told it to, here is a snippet from /etc/ pf.conf... Maybe a stupid check, but did you

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Olivier Mehani
On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging > the packets I've told it to, here is a snippet from /etc/ pf.conf... Maybe a stupid check, but did you enable pf in rc.conf ? -- Olivier Mehani <[EMAIL

pf not logging to /var/log/pflog...

2006-01-08 Thread poncenby smythe
List, I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging the packets I've told it to, here is a snippet from /etc/ pf.conf... ext_if="tun0" int_if="rl0" lan_net = "192.168.1.0/24" rfc1918 = "{ 127.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 10.0.0.0/8 }" set block-polic