[Semibug] pf log to syslogd, part 2

[Mark Moellering]

Everyone,


I followed the forum thread and got everything set up on my OpenBSD 
firewall.  I do have a question, though.  I cannot figure out how to get 
the messages to log into their own file. Everything goes to messages.  I 
went through the syslog portion of Michaels book but I still couldn't 
get it to work.

Can anyone give me pointers on what I have to change in the syslog.conf 
file to get things to log to /var/log/{*filename of my choice*} ?


Thanks


Mark

On 12/31/19 9:37 PM, Ron Szpak wrote:
> Is this what you are looking for:
>
> ‎https://forums.freebsd.org/threads/send-pf-logs-to-syslog-mini-howto.38811/
>
> Cheers,
>
> Ron
>
> Sent from my BlackBerry 10 smartphone.
>    Original Message
> From: semibug-request at lists.nycbug.org
> Sent: Tuesday, December 31, 2019 12:00 PM
> To: semibug at lists.nycbug.org
> Reply To: semibug at lists.nycbug.org
> Subject: Semibug Digest, Vol 46, Issue 6
>
> Send Semibug mailing list submissions to
> semibug at lists.nycbug.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.nycbug.org:8080/mailman/listinfo/semibug
> or, via email, send a message with subject or body 'help' to
> semibug-request at lists.nycbug.org
>
> You can reach the person managing the list at
> semibug-owner at lists.nycbug.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Semibug digest..."
>
>
> Today's Topics:
>
> 1. pf log to syslogd / remote server (Mark Moellering)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 30 Dec 2019 13:15:41 -0500
> From: Mark Moellering <markmoellering at psyberation.com>
> To: semibug at lists.nycbug.org
> Subject: [Semibug] pf log to syslogd / remote server
> Message-ID: <ba3c58e5-46fd-6abc-241c-7de3a3c4b52a at psyberation.com>
> Content-Type: text/plain; charset=utf-8; format=flowed
>
> Wondering if it is possible to have OpenBSD use syslog/syslogd for pf,
> instead of pflog, as I would like to forward the pf logs to a remote
> server.? I can't find a way to have pflog do that.
>
> Any suggestions are greatly appreciated
>
>
> Thanks
>
>
> Mark
>
>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> Semibug mailing list
> Semibug at lists.nycbug.org
> http://lists.nycbug.org:8080/mailman/listinfo/semibug
>
>
> ------------------------------
>
> End of Semibug Digest, Vol 46, Issue 6
> **************************************
>
> _______________________________________________
> Semibug mailing list
> Semibug at lists.nycbug.org
> http://lists.nycbug.org:8080/mailman/listinfo/semibug