There's now a number of important log files which I don't have access to, whether it's due to bad configuration (fresh install of El Capitan only 2 weeks), or worse someone tampering with my system? I believe this file is meant to log authorisations and failures for services such as SSH. ? file appfirewall.log file_max=100M all_max=500Mīut it also has the following lines in the conf file # Facility gets saved in appfirewall.log I've found that rc.conf has the following lines in it. I'm unsure if appfirewall.log needs to be configured in nf or asl.conf at all? Currently it's not listed. So the firewall is working and blocking network traffic. However I can view the logging life as it's happening in terminal. Again the log file doesn't seem to be created at all. I've also set up PF now using a gui called IceFloor. I'm wondering if it may have something to do with permissions set for the log files maybe? I've had the issue with the firewall logging since the first time I checked which would've been a year or so ago now. Thanks I might look into disabling SIP to test and see if it works, but I don't want to leave SIP off, so that it can do what it's designed to do and protect the system. I haven't tried disabling SIP to see if it would make any difference. Whether this has anything with the firewall logs I am not sure. The only thing that comes to mind is System Integrity Protection (SIP) has been enabled by default with Sierra. I believe the correct logging options command should include a colon, as follows: -setloggingopt : detailĪgain, I'm running Sierra and I could not find any ALF logs in the /var/log folder. I believe that I have the correct commands and am configuring the correct firewall, but on my system it doesn't seem to be writing to the log file at all, even when I read the current status and it says that logging is enabled. Sudo /usr/libexec/ApplicationFirewall/socketfilterfw -setloggingopt detail Sudo /usr/libexec/ApplicationFirewall/socketfilterfw -setloggingmode on Per chance, where logging was successful, were these pre-Sierra Macs? I've tested turning logging on and off via the following commands 'on a different machine' and it seems to have the desired effect of turning the logging on and off, and it writes to appfirewall.log. and yes, I believe it should be writing logs to the /var/log folder when logging is enabled. Yes, we are talking about the same OS X / macOS application layer (or socket filter) firewall. There’ve been times I haven’t posted here not because anyone’s mean (this is a great place and I’m happy to contribute what I can to everyone!), but because I’m afraid to show up without any new goods.Correct me if I'm wrong but it is the ALF, Application Layer Firewall which is the one I'm looking for isn't it? Which should write to the file. It’s why I initially waited so long to even announce Forks, then they happened anyway! In the span of a few years it’s been college, sudden adulting, marriage, Covid, and now a friggin’ baby! Sometimes I feel pretty removed from the person who first started this project! Thank you so much for your patience, really. Seriously, I’ve been so scared of disappointing people with delays. I do the talking for Team Spoon, but I know Toro appreciates it too! He can be a little quiet (as can I ), but he’s very much around and enjoys the work. Aww, that’s really nice of you to say ! I appreciate you taking the time for your support and kind words.
0 Comments
Leave a Reply. |