On Tue, May 11, 2010 at 2:56 AM, Lars Nooden <[email protected]> wrote: > You answered your own question. ;) B Look at the 'action' field explanation > in the manual page for syslog.conf(5)
Maybe I'm missing something: I can send normal syslog data to a remote logging server without writing log files but not PF log entries - there is no entry in syslog.conf for pflog. There's a neat trick listed here: http://www.openbsd.org/faq/pf/logging.html but the PF logs first have to be written locally to a the pflog file. The concern is repeated writing to the SSD or CF which apparently tends to shorten their life. If PF could write directly to syslog this problem would be ameliorated. Chris
