On Mon, 10 May 2010, Chris Smith wrote:
What about logging in this case? Can PF logs be sent to another system running a syslog daemon?
You answered your own question. ;) Look at the 'action' field explanation in the manual page for syslog.conf(5)
About the diskless machine, many of the so-called diskless machines actually use flash or ssd instead of a spinning magnetic platter. The base installation of openbsd is still quite small. If you are only running PF, you will have a lot of space left over on a 1GB CF to make a logging partition. Flash can be very slow, so volitile caches can be stored in an mfs partition.
/Lars
