To christen the brand new security category for syslog, we get IPFW

using syslog(3) (log(9)) for its various purposes! This long-awaited
change also includes such nice things as:
	* macros expanding into _two_ comma-delimited arguments!
	* snprintf!
	* more snprintf!
	* linting and criticism by more people than you can shake a stick at!
	* a slightly more uniform message style than before!
	 and last but not least
	* no less than 5 rewrites!

Reviewed by:	committers

1 files changed, 8 insertions, 5 deletions

diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8
index 94b9f09..6d9005b 100644
--- a/sbin/ipfw/ipfw.8
+++ b/sbin/ipfw/ipfw.8
@@ -1,5 +1,5 @@
 .\"
-.\" $Id: ipfw.8,v 1.55 1999/08/01 16:57:23 green Exp $
+.\" $Id: ipfw.8,v 1.56 1999/08/11 15:36:13 luigi Exp $
 .\"
 .Dd July 20, 1996
 .Dt IPFW 8
@@ -438,8 +438,9 @@ If the kernel was compiled with
 .Dv IPFIREWALL_VERBOSE ,
 then when a packet matches a rule with the
 .Ar log
-keyword a message will be printed on the console.
-If the kernel was compiled with the
+keyword or a clear/resetlog is performed, a message will be logged to
+.Xr syslogd 8 ,
+or, if that fails, to the console.  If the kernel was compiled with the
 .Dv IPFIREWALL_VERBOSE_LIMIT
 option, then by default logging will cease after the number
 of packets specified by the option are received for that
@@ -449,11 +450,13 @@ is used, that
 .Ar number
 will be the default logging limit rather than
 .Dv IPFIREWALL_VERBOSE_LIMIT .
+When this limit is reached, the limit and rule number will be logged.
 Logging may then be re-enabled by clearing the logging counter
 or the packet counter for that entry.
 .Pp
-Console logging and the log limit are adjustable dynamically
-through the
+The
+.Xr syslogd 8
+logging and the default log limit are adjustable dynamically through the
 .Xr sysctl 8
 interface in the MIB base of
 .Dv net.inet.ip.fw .