To Change IPv6 Internet Connection Firewall Log Options

Updated: February 03, 2006
  1. Open the command prompt by clicking Start, clicking All Programs, pointing to Accessories, and then clicking Command Prompt.

  2. Type netsh to start the helper.

  3. Type firewall to enter the IPv6 Internet Connection Firewall (ICF) context.

  4. To set the firewall logging options, use the following parameters:

    • To specify where the log files should be written to, use the parameter


      An example is:

      set logging filelocation=c:\logfile.log
    • To specify the file size of the firewall log, use the parameter


      An example is:

      set logging filesize=4096.
    • To specify whether dropped packets should be logged, use the parameter

      . An example is:
      set logging droppedpackets=disable
    • To specify if successful connections should be logged, use the parameter

      . An example is:
      set logging successfulconnections=disable


  • IPv6 Internet Connection Firewall is only provided with the Advanced Networking Pack for Windows XP, a free download for computers running Windows XP with Service Pack 1. For computers running Windows XP with Service Pack 2, IPv6 Internet Connection Firewall has been replaced with the new Windows Firewall. For more information about Windows Firewall, see Manually Configuring Windows Firewall in Windows XP Service Pack 2.

    Computers running Windows XP with Service Pack 2 and Windows Firewall have a new netsh firewall context and a new set of commands to configure Windows Firewall. The set of commands in this article are only for IPv6 Internet Connection Firewall, not for Windows Firewall. For information about the netsh firewall commands for Windows Firewall, see Appendix B of Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2.

  • To complete this procedure, you must be logged on as Administrator or a member of the Administrators group.

  • If your computer is connected to a network, network policy settings might prevent you from completing this procedure.

  • Logging does not need to be enabled for IPv6 Internet Connection Firewall to function.

  • The default maximum size limit of the security logs is 4,096 kilobytes (KB). The absolute maximum log file size is 32,767 KB.

  • If the maximum allowable size for pfirewall-v6.log is exceeded, the information that the log file contains is written to a new file and saved as pfirewall-v6.log.old. The new information is saved in pfirewall-v6.log.

  • The default file name is pfirewall-v6.log