Editing PF Sense Firewall Implementation at GIPL (section)

= Firewall Logs =
The Firewall logs at '''Status > System Logs''' on the '''Firewall''' tab show all events logged by the firewall.


Each entry is displayed with the action ( pass or block, reject is only logged as block), time, interface, source, destination, and protocol.


Configuration Of rsyslog Server for Logs Storage:-

Status: >System logs > Settings


[[Image:Gpil-068.jpg]]


'''Configuration of rsyslog on Centos :-'''


===== Setup Log File Location =====
Now edit Rsyslog configuration file and configure the location’s to generate log files in system.

<nowiki># vim /etc/rsyslog.conf</nowiki>


and add following lines as the end of file.

$template TmplAuth, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log" 


authpriv.* ?TmplAuth

<nowiki>*.info,mail.none,authpriv.none,cron.none </nowiki>?TmplMsg


===== Enable Module and UDP Protocol =====
Also remove comment from following lines ( remove starting # ) in rsyslog configuration file to enable UDP.

$ModLoad imudp

$UDPServerRun 514


===== Restart Rsyslog  =====
After making above changes in Rsyslog central server, restart service using following command.

<nowiki># service rsyslog restart</nowiki>


'''Logrotation:-'''

Create file''' :- '''/etc/logrotate.d/pfsense


'''And enter:-'''


'''/var/log/pfsense/filterlog.log'''

'''{'''

'''daily'''

'''missingok'''

'''rotate 60'''

'''compress'''

'''notifempty'''

'''create 640 root root'''

'''postrotate'''

'''/etc/init.d/rsyslog restart >/dev/null'''

'''endscript'''

'''}'''


'''Save and Quit.'''


'''RRD Graphs:-'''


These are located under '''Status > RRD Graphs'''. Several graphs are presented for each monitored item, with varying time intervals and averages. 

These graphs measure things such as CPU usage, memory usage, state table usage, throughput (in bytes as well as packets), link quality, traffic shaping queue usage, and so on. 


[[Image:Gpil-069.jpg]]