[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: pfstat log question

On Tue, 04 May 2004 12:34:47 +0200
Jules Colding <[email protected]> wrote:
> Hi,
> Using pfstat and enabling interface logging with "set loginterface fxp0"
> leaves me with a single question: 
> Do I need to add the "log" keyword to all filter rules on fxp0 to enable
> logging of the passed/blocked packages? 
> If yes, should I use "log-all" instead?
pfstat uses all of the information in pfctl -si.  So you do not need to specify 'log' in your rulset.  Although you would need to if you planned on monitoring pflogd (i believe).
Hope this helps,