I've installed FreeBSD 5.4 for sparc64. IPFilter works
perfectly but when I add "log" to the rules set, ipmon
doesn't show anything:
FirewallBSD# ipmon -o I
Ipmon is up, but does not log any blocked or passed
packets.
I`ve recompiled the kernel with the following option:
options IPFILTER_LOG
but the problem persists.
I can see both the state and nat tables, without any
problem
FirewallBSD# ipmon -o S
17/01/2006 21:15:56.848382 STATE:NEW 10.1.15.6,61981
-> 10.1.10.1,53 PR udp
17/01/2006 21:15:56.849781 STATE:NEW 10.1.15.6,56799
-> 10.1.10.1,53 PR udp
FirewallBSD# ipmon -o N
17/01/2006 21:18:19.089300 @1 NAT:BIMAP 10.7.1.xx,80
<- ->
200.26.56.xxx,80 [200.26.237.36,4134]
Does anybody know what the problem could be?
My settings are the following:
rc.conf
ipfilter_enable="YES"
ipmon_enable="YES"
ipmon_flags="-Dsvn"
ipnat_enable="YES"
System
FirewallBSD# uname -a
FreeBSD FirewallBSD.anses.gov.ar 5.4-RELEASE FreeBSD
5.4-RELEASE #7: Fri Jan 13 15:37:58 ART 2006
[EMAIL PROTECTED]:/usr/src/sys/sparc64/compile/FIREWALL
sparc64
ipfilter
FirewallBSD# ipf -V
ipf: IP Filter: v3.4.35 (384)
Kernel: IP Filter: v3.4.35
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 0
Hardware: Sun Enterprice 450
number of procesors: 4
Sebastián Anzaldi
___________________________________________________________
1GB gratis, Antivirus y Antispam
Correo Yahoo!, el mejor correo web del mundo
http://correo.yahoo.com.ar