diff options
author | green <green@FreeBSD.org> | 1999-08-21 18:35:55 +0000 |
---|---|---|
committer | green <green@FreeBSD.org> | 1999-08-21 18:35:55 +0000 |
commit | e3f950dd51d510594fc21ab5677709af55f73425 (patch) | |
tree | 4d0805943dc7289f2923b2c9797e0147e6ffb810 /sbin/ipfw | |
parent | db4fdbd041e22acdba198dd37ef7bcee12c2ac19 (diff) | |
download | FreeBSD-src-e3f950dd51d510594fc21ab5677709af55f73425.zip FreeBSD-src-e3f950dd51d510594fc21ab5677709af55f73425.tar.gz |
To christen the brand new security category for syslog, we get IPFW
using syslog(3) (log(9)) for its various purposes! This long-awaited
change also includes such nice things as:
* macros expanding into _two_ comma-delimited arguments!
* snprintf!
* more snprintf!
* linting and criticism by more people than you can shake a stick at!
* a slightly more uniform message style than before!
and last but not least
* no less than 5 rewrites!
Reviewed by: committers
Diffstat (limited to 'sbin/ipfw')
-rw-r--r-- | sbin/ipfw/ipfw.8 | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 94b9f09..6d9005b 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -1,5 +1,5 @@ .\" -.\" $Id: ipfw.8,v 1.55 1999/08/01 16:57:23 green Exp $ +.\" $Id: ipfw.8,v 1.56 1999/08/11 15:36:13 luigi Exp $ .\" .Dd July 20, 1996 .Dt IPFW 8 @@ -438,8 +438,9 @@ If the kernel was compiled with .Dv IPFIREWALL_VERBOSE , then when a packet matches a rule with the .Ar log -keyword a message will be printed on the console. -If the kernel was compiled with the +keyword or a clear/resetlog is performed, a message will be logged to +.Xr syslogd 8 , +or, if that fails, to the console. If the kernel was compiled with the .Dv IPFIREWALL_VERBOSE_LIMIT option, then by default logging will cease after the number of packets specified by the option are received for that @@ -449,11 +450,13 @@ is used, that .Ar number will be the default logging limit rather than .Dv IPFIREWALL_VERBOSE_LIMIT . +When this limit is reached, the limit and rule number will be logged. Logging may then be re-enabled by clearing the logging counter or the packet counter for that entry. .Pp -Console logging and the log limit are adjustable dynamically -through the +The +.Xr syslogd 8 +logging and the default log limit are adjustable dynamically through the .Xr sysctl 8 interface in the MIB base of .Dv net.inet.ip.fw . |