Re: How to controlling ipfw log using sysctl variables
site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Le 29 juin 09 à 09:41, rajesh mishra a écrit : I am new to Mac OS X.Can you tell me which mail list would be appropriate for this kind of problem? Regards Rajesh. Hello Rajesh, You could have a look at, for example: http://lists.apple.com/mailman/listinfo/ http://discussions.apple.com/index.jspa http://www.afp548.com/forum/index.php http://forums.macosxhints.com/ Firstly, this has nothing to do with Darwin. -- Finlay Hi All, I have set System Preference -> Security -> Firewall -> Advanced -> Firewall Logging to false. And system variable net.inet.ip.fw.verbose to 2. Does any body know why I am not getting loggs? Is there any thing else hidden in Leopard (Mac OS X 10.5.4), which Looks like there's a bug somewhere... ;-) HTH, Axel _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... On Sun, Jun 28, 2009 at 6:03 AM, Finlay Dobbie <finlay.dobbie@gmail.com
wrote: Secondly, the Leopard application-level firewall is not based on ipfw. On Fri, Jun 26, 2009 at 9:55 AM, rajesh mishra<raj4linux@gmail.com> wrote:
Enable Note that this is a Mac OS X "special" value, requiring the in-kernel ipfw to log through the kev_post_msg() function after removal of the ipfw: prefix. At the other end of the chain, this will end in log messages sent with a facility LOG_LOCAL0. But I am not getting the ipfw logging to /var/log/appfirewall.log in Leopard (Mac OS X 10.5.4). controls the IPFW logging? Unless I'm wrong, this should be the job of /usr/libexec/ ApplicationFirewall/appfwloggerd: to filter the ipfw messages ultimately have them written to /var/log/ipfw.log. The problem is that appfwloggerd seems to be compiled so as to make use of a facility of... LOG_LOCAL0 as well, instead of LOG_LOCAL1 as expected by /etc/syslog.conf. The source code of appfwloggerd hasn't been made public, but that daemon looks very close to ipfwloggerd that shipped with Tiger. For what it is worth, I thus quickly tried to compile the latter from project "FirewallTool-18" after having changed LOG_LOCAL0 into LOG_LOCAL1 and it seemed to work. Now, the real question is: why exactly do you want to have those messages written to /var/log/ipfw.log? Isn't it sufficient for your needs to have them into /var/log/appfirewall.log? This email sent to site_archiver@lists.apple.com
participants (1)
-
Axel Luttgens