pfSense Syslogs

christenjm

Does pfSense generate syslogs when a new firewall rule is created or edited etc. ?

stephenw10

Yes. The ruleset is reloaded when that happens so you will see:

Jul 15 14:18:39 	check_reload_status 		Syncing firewall
Jul 15 14:18:40 	check_reload_status 		Reloading filter

Do you mean does it log the actual rule changes? Not in the system log but the last 30 configs are stored and can be viewed and diff'd at Diagnostics > Backup & Restore > Config History tab.

Steve

christenjm

@stephenw10
thank you. Is there a way to send these changes over syslogs

stephenw10

Not by default.
It's not something I've ever tried but you might be able to use the shellcmd option 'afterfilterchangeshellcmd'. If you ran a diff of the current config file against the first backup that would show you the last change. You could redirect that output to the logger. Or export it directly maybe.
The exact syntax for that is left as an exercise.

Steve

christenjm

@stephenw10
Thank you for your reply