Merge from ipfw.8 (1.57).

o Sync with netinet6/ip6_fw.c (1.12).

MFC after:	10 days
This commit is contained in:
Jun Kuriyama 2001-06-24 23:40:09 +00:00
parent 384d80b3b9
commit 8194b338dc

View File

@ -222,16 +222,20 @@ If the kernel was compiled with
.Dv IP6FIREWALL_VERBOSE , .Dv IP6FIREWALL_VERBOSE ,
then when a packet matches a rule with the then when a packet matches a rule with the
.Dq log .Dq log
keyword a message will be printed on the console. keyword or a clear/resetlog is performed, a message will be logged to
If the kernel was compiled with the .Xr syslogd 8 ,
or, if that fails, to the console. If the kernel was compiled with the
.Dv IP6FIREWALL_VERBOSE_LIMIT .Dv IP6FIREWALL_VERBOSE_LIMIT
option, then logging will cease after the number of packets option, then logging will cease after the number of packets
specified by the option are received for that particular specified by the option are received for that particular
chain entry. Logging may then be re-enabled by clearing chain entry.
When this limit is reached, the limit and rule number will be logged.
Logging may then be re-enabled by clearing
the packet counter for that entry. the packet counter for that entry.
.Pp .Pp
Console logging and the log limit are adjustable dynamically The
through the .Xr syslogd 8
logging and the default log limit are adjustable dynamically through the
.Xr sysctl 8 .Xr sysctl 8
interface. interface.
.Pp .Pp