[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: pfstat log question
On Tue, 04 May 2004 12:34:47 +0200
Jules Colding <[email protected]> wrote:
> Using pfstat and enabling interface logging with "set loginterface fxp0"
> leaves me with a single question:
> Do I need to add the "log" keyword to all filter rules on fxp0 to enable
> logging of the passed/blocked packages?
> If yes, should I use "log-all" instead?
pfstat uses all of the information in pfctl -si. So you do not need to specify 'log' in your rulset. Although you would need to if you planned on monitoring pflogd (i believe).
Hope this helps,