Logging traffic on rule even if logging is switched off for the current rule

    Using: pfSense-Full-Update-1.2.3-20090407-0949.tgz.gz
    The following is logged on syslog and in "Diagnostics: System logs: Firewall" when "Show raw filter logs" is enabled. If "Show raw filter logs" is disabled, the entry is only visible on the syslog server:
    pf: 7\. 969869 rule 204/8(ip-option): pass in on rl0: (tos 0x0, ttl 54, id 78, offset 0, flags [DF], proto TCP (6), length 313, options (EOL)) xx.xxx.xxx.xx.50039 > P 0:257(257) ack 1 win 33120 <nop,nop,timestamp 0="" 7120472="">The logging for this rule is not enabled:
    			 <max-src-nodes><max-src-states><statetimeout><statetype>keep state</statetype>
    I have not noticed this behaviour for other rules.
    Besides this, thank you for this excellent firewall.</nop,nop,timestamp> 

Log in to reply