How to enable ipfw.log

Under Mountain Lion, I want logs from ipfw sent to ipfw.log instead of dumped in system.log I've tried to figure out how OSX handles logs, but... after going back and forth between a syslog.conf which does little if anything, a newsyslog.conf that seems to only handle rotation, an asl.conf that adding a line file /var/log/ipfw.log didn't work, Google searches and documentation that keeps refering to syslog.conf even though it isn't used, man pages for asl.conf that don't help, man pages for ipfw that say logs are sent to facility LOG_SECURITY but asl.conf doesn't seem to recognize that...

Besides just "How do I do this?", is there a resource that clearly explains how logs are handled in 10.8?

Well, you might start here, which says there are actually 2 firewalls and how to set it up: https://www.sas.upenn.edu/computing/mac-osx-ipf-firewall
Then go here, about halfway down the page: configure ipfw - Mac OS X Hints
for turning on logging.

cradom said:

Then go here, about halfway down the page: configure ipfw - Mac OS X Hints
for turning on logging.

Click to expand...

Didn't notice the date on that post? OSX no longer uses syslog.conf Now, they use /etc/asl.conf

In /etc/asl.conf, there's a line:


It looks like ipfw logs are all level 7, so:


However, there are several "Level 7" / 'debug' logs other than ipfw / ip6fw entries. I'm still looking and hoping there's a way to be a little more granular.

I'm bad about that, as some here can tell you. Answering 3 year old posts and whatnot.