Re: Logging in IPtables

From: Res (res_at_ausics.net)
Date: 10/03/04

  • Next message: Volker Kindermann: "Re: Using Firewall Builder" 
    Date: Sun, 3 Oct 2004 09:43:31 +1000 (EST)
To: menonrr@jmu.edu, General Red Hat Linux discussion list <redhat-list@redhat.com>

    On Fri, 1 Oct 2004, D u n c c s wrote:

    > use the -l or l option
    > a simple google could have gave u the answer , just like that !

    Incorrect... what you gave was for ipchains, iptables does not accept -l

    for the original poster (menonrr)...

    You need to create a target rule, with -j LOG (prior to your
    ACCEPT/DROP/REJECT rule)
    There are lots of options like you can only log syn pkts etc, I suggest
    'man iptables'

    >
    > Dunccs
    >
    > ----- Original Message -----
    > From: <menonrr@jmu.edu>
    > To: <redhat-list@redhat.com>
    > Sent: Friday, October 01, 2004 2:24 PM
    > Subject: Logging in IPtables
    >
    >
    >>
    >> Hello,
    >>
    >> Please provide some tips on logging all the outgoing and
    >> incoming traffic in IPtables.
    >>
    >> Thanks.
    >>
    >> --
    >> redhat-list mailing list
    >> unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    >> https://www.redhat.com/mailman/listinfo/redhat-list
    >>
    >
    > --
    > redhat-list mailing list
    > unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    > https://www.redhat.com/mailman/listinfo/redhat-list
    > 

    -- 
Regards,
Res
-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: Volker Kindermann: "Re: Using Firewall Builder"

    Relevant Pages

    • Re: IPTables Logging
      ... It's not a bad idea to have IPTables do some heavy-duty logging as ... You'll definitely want to log IPTables to a different file as well. ... Securing Apache Web Server with thawte Digital Certificate ...
      (Security-Basics)
    • Re: susefirewall2 logging
      ... I'm using 9.3 and syslog-ng filters the iptables output to one file ... SuSEfirewall2 by default and will be logged. ... is, at the bottom, an example of a iptable rule which prevents logging ... of any udp packets coming in, or going out from any interface on ports ...
      (alt.os.linux.suse)
    • Logging woes...
      ... have iptables set up to do *a lot* of logging. ... discards said messages for subsequent logging rules. ... into the other logs that take the kern.debug messages, ...
      (comp.os.linux.setup)
    • Re: Linux masquerading
      ... All I see here are a lot of iptables filtering logs. ... packet-filtering rules. ... you could disable logging in your iptables rules and run ... If that is where your filtering rules are set up, you could then, as ...
      (comp.os.linux)
    • Re: IPTABLES logging (was: NTP, ntpdate and ISP-based firewall)
      ... > To log all events of INFO or higher priority that meet those input criteria. ... I find that logging from iptables is ugly and difficult to read, ... I tell anything kernel* level of syslog to be logged in a file ... Logging from iptables also tends to generate a big log file, ...
      (Fedora)