On 11.11.2023. 12:13, Stuart Henderson wrote: > On 2023-11-11, Peter N. M. Hansteen <pe...@bsdly.net> wrote: >> On Fri, Nov 10, 2023 at 08:23:54PM +0100, Hrvoje Popovski wrote: >>> what would be best way to log pf logs in ascii and sent it to remote >>> syslog ? I'm aware of pflow but I need ascii pf logs on remote syslog >>> server. >> >> something like the good old >> https://home.nuug.no/~peter/pf/newest/log2syslog.html >> should still work, I think. > > Or > https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/www/faq/pf/logging.html?rev=1.68#syslog > > If you don't need _all_ pf logs converting to syslog, you can create a > separate interface "echo up | doas tee /etc/hostname.pflog1" and use > "log to pflog1" on selected rules. >
Thank you Peter and Stuart that's exactly what I need ...