Make -log_ipfw_denied active by default with -verbose.

Discussed with:	phk

2 files changed, 8 insertions, 1 deletions

diff --git a/sbin/natd/natd.8 b/sbin/natd/natd.8
index a6d927b..ff213a4 100644
--- a/sbin/natd/natd.8
+++ b/sbin/natd/natd.8
@@ -466,6 +466,8 @@ The range will be cleared for all rules on startup.
 Log when a packet can not be re-injected because an
 .Xr ipfw 8
 rule blocks it.
+This is the default with
+.Fl verbose .
 .El
 .Sh RUNNING NATD
 The following steps are necessary before attempting to run
diff --git a/sbin/natd/natd.c b/sbin/natd/natd.c
index 351d652..9d5fb17 100644
--- a/sbin/natd/natd.c
+++ b/sbin/natd/natd.c
@@ -161,7 +161,7 @@ int main (int argc, char** argv)
 	dynamicMode		= 0;
  	logDropped		= 0;
  	logFacility		= LOG_DAEMON;
-	logIpfwDenied		= 0;
+	logIpfwDenied		= -1;
 /*
  * Mark packet buffer empty.
  */
@@ -170,6 +170,11 @@ int main (int argc, char** argv)
 
 	ParseArgs (argc, argv);
 /*
+ * Log ipfw(8) denied packets by default in verbose mode.
+ */
+	if (logIpfwDenied == -1)
+		logIpfwDenied = verbose;
+/*
  * Open syslog channel.
  */
 	openlog ("natd", LOG_CONS | LOG_PID | (verbose ? LOG_PERROR : 0),