Apple FIrewall NOT logging

Question

The builtin firewall has quit logging on my mac - it used to log all types of attempts, as it should, but it has totally stopped.
I've called apple. I've done an archive and install. I've done an erase and install.
Yet... nothing will make this firewall log.
The firewall is enabled. No sharing services are turned on. Under the advanced mode of the firewall tab, the option to enable firewall log is selected.
Has anyone ever heard of this problem, or does anyone have any idea how to fix?
The firewall used to log all the time, every few minutes, so I know the absence of any logs at all is not normal behavoir.

Answer 1

Has the log limit been exceeded? From man ipfw
<pre>
log [logamount number]
If the kernel was compiled with IPFIREWALL_VERBOSE, then when a
packet matches a rule with the log keyword a message will be
logged to syslogd(8) with a LOG_AUTHPRIV facility. Note: by
default, they are appended to the /var/log/system.log file (see
syslog.conf(5)). If the kernel was compiled with the
IPFIREWALLVERBOSELIMIT option, then by default logging will
cease after the number of packets specified by the option are
received for that particular chain entry, and
net.inet.ip.fw.verbose_limit will be set to that number. How-
ever, if logamount number is used, that number will be the log-
ging limit rather than net.inet.ip.fw.verbose_limit, where the
value ``0'' removes the logging limit. Logging may then be re-
enabled by clearing the logging counter or the packet counter for
that entry.
Console logging and the log limit are adjustable dynamically
through the sysctl(8) interface in the MIB base of
net.inet.ip.fw.
</pre>
So, what does sysctl -a net.inet.ip.fw show?
G4/466, eMac 800, iBook 1.33   Mac OS X (10.4.5)