Re: log vs keep state

On Mon, May 15, 2006 at 09:03:38PM +1000, Darren Reed wrote:
> > On Sun, May 14, 2006 at 09:39:28PM +1000, Darren Reed wrote:
> > > pass in log on foo0 proto tcp all flags S keep state
> >
> > I notice that ipfstat reports a high number in "log failures:".
>
> Try using: ipmon -o NS instead of the rule above.

Thank you, that does the trick.

Do you have a wishlist up somewhere? Unfortunately, I doubt I can send
beer by UPS.

Ben