Merge from ipfw.8 (1.57).

o Sync with netinet6/ip6_fw.c (1.12).

MFC after:	10 days
This commit is contained in:
Jun Kuriyama 2001-06-24 23:40:09 +00:00
parent 384d80b3b9
commit 8194b338dc
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=78736

View File

@ -222,16 +222,20 @@ If the kernel was compiled with
.Dv IP6FIREWALL_VERBOSE ,
then when a packet matches a rule with the
.Dq log
keyword a message will be printed on the console.
If the kernel was compiled with the
keyword or a clear/resetlog is performed, a message will be logged to
.Xr syslogd 8 ,
or, if that fails, to the console. If the kernel was compiled with the
.Dv IP6FIREWALL_VERBOSE_LIMIT
option, then logging will cease after the number of packets
specified by the option are received for that particular
chain entry. Logging may then be re-enabled by clearing
chain entry.
When this limit is reached, the limit and rule number will be logged.
Logging may then be re-enabled by clearing
the packet counter for that entry.
.Pp
Console logging and the log limit are adjustable dynamically
through the
The
.Xr syslogd 8
logging and the default log limit are adjustable dynamically through the
.Xr sysctl 8
interface.
.Pp