<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Super Dumb Question re Logs]]></title><description><![CDATA[<p dir="auto">Been having 'issues' with IPSec so have been paying more attention to the firewall log than usual - and I have come to a conclusion.</p>
<p dir="auto">I have no idea how to link a log entry to a particular rule  … I mean rule 179 doesn't exactly tell me much - given that none of my rules have numbers.</p>
<p dir="auto">i.e. pf: 124. 995672 rule 179/0(match): block in on ng0:</p>
<p dir="auto">sure I know it was blocked, sure I can even identify the IP Addresses and there is a short 'description' i.e igmp query v2 but thats it ....</p>
<p dir="auto">This is just an example of the problem for me - can somebody please explain this stuff ...  pf: 124. 995672 rule 179/0(match)</p>
<p dir="auto">And tell me how to identify the 'rule' that it thinks matches.</p>
]]></description><link>https://forum.netgate.com/topic/20712/super-dumb-question-re-logs</link><generator>RSS for Node</generator><lastBuildDate>Fri, 12 Jun 2026 15:05:40 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/20712.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 15 Jan 2010 19:40:28 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Super Dumb Question re Logs on Mon, 18 Jan 2010 09:10:01 GMT]]></title><description><![CDATA[<p dir="auto">I am looking from the web interface and …. what red cross ?????</p>
<p dir="auto">There are no red crosses anywhere on my log window.</p>
<p dir="auto">And then I changed the view .... there is the red cross on the simple view .... when viewing in raw format there is no red cross - and I've only been using pFsense 2 years  :-[</p>
]]></description><link>https://forum.netgate.com/post/219878</link><guid isPermaLink="true">https://forum.netgate.com/post/219878</guid><dc:creator><![CDATA[BenKenobe]]></dc:creator><pubDate>Mon, 18 Jan 2010 09:10:01 GMT</pubDate></item><item><title><![CDATA[Reply to Super Dumb Question re Logs on Sat, 16 Jan 2010 21:51:58 GMT]]></title><description><![CDATA[<p dir="auto">If you view the logs in the gui, click the red "x" icon and it will show a window with the rule.</p>
<p dir="auto">From the CLI, use the output of "pfctl -vvsr"</p>
]]></description><link>https://forum.netgate.com/post/219762</link><guid isPermaLink="true">https://forum.netgate.com/post/219762</guid><dc:creator><![CDATA[jimp]]></dc:creator><pubDate>Sat, 16 Jan 2010 21:51:58 GMT</pubDate></item></channel></rss>