NAT Logging feature

ismail.yushaw

Re: How to find spambot? Got network abuse report from my ISP

Hi,
I woke up to a similar issue, I cant just block those ports simply so. I would have wished pfsense logs all NAT connections as which public IP was used any RCF 1918 Address and the timestamp so we can look them up and see who is the offender.

Kind regards

stephenw10

You probably want to export and log netflow data if you want that sort of detail:
https://docs.netgate.com/pfsense/en/latest/recipes/netflow-with-softflowd.html

Or you could enable logging on the pass firewall rules and export those logs to a syslog server:
https://docs.netgate.com/pfsense/en/latest/monitoring/logs/remote.html

Steve