From 8194b338dc9782d491ded24d29d35dc1845ba862 Mon Sep 17 00:00:00 2001 From: Jun Kuriyama Date: Sun, 24 Jun 2001 23:40:09 +0000 Subject: [PATCH] Merge from ipfw.8 (1.57). o Sync with netinet6/ip6_fw.c (1.12). MFC after: 10 days --- sbin/ip6fw/ip6fw.8 | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/sbin/ip6fw/ip6fw.8 b/sbin/ip6fw/ip6fw.8 index 7482b1929370..60d7aebc4525 100644 --- a/sbin/ip6fw/ip6fw.8 +++ b/sbin/ip6fw/ip6fw.8 @@ -222,16 +222,20 @@ If the kernel was compiled with .Dv IP6FIREWALL_VERBOSE , then when a packet matches a rule with the .Dq log -keyword a message will be printed on the console. -If the kernel was compiled with the +keyword or a clear/resetlog is performed, a message will be logged to +.Xr syslogd 8 , +or, if that fails, to the console. If the kernel was compiled with the .Dv IP6FIREWALL_VERBOSE_LIMIT option, then logging will cease after the number of packets specified by the option are received for that particular -chain entry. Logging may then be re-enabled by clearing +chain entry. +When this limit is reached, the limit and rule number will be logged. +Logging may then be re-enabled by clearing the packet counter for that entry. .Pp -Console logging and the log limit are adjustable dynamically -through the +The +.Xr syslogd 8 +logging and the default log limit are adjustable dynamically through the .Xr sysctl 8 interface. .Pp