System logging can be configured for the firewall filter process. You can set system logging to record messages of a particular level or all levels. The messages are sent to a system logging file.
The following is a sample system logging configuration for the firewall filter icmp-syslog. For more information about configuring system logging, see the JUNOS System Basics Configuration Guide.
- [edit]
- system {
-
- syslog {
-
- file filter {
- firewall any;
- archive no-world-readable;
- }
- }
- }
This causes the syslog to write any messages with the syslog facility of firewall to the file /var/log/filter. This keeps the messages out of the main system log file and makes them easier to find.