Re: IPTables

From: Crucificator (crucificator_at_home.ro)
Date: 10/29/04

  • Next message: Crucificator: "Re: IP address resolution."
    Date: Fri, 29 Oct 2004 16:52:47 +0200
    To: rupesh kumar kumar <rupesh_533@rediffmail.com>, General Red Hat Linux discussion list <redhat-list@redhat.com>
    
    

    rupesh kumar kumar wrote:

    >
    >Hai everybody,
    >
    > I wrote an IPTABLE rule which targets itself to 'LOG' i.e whichever packet matches the rule, the information about the packet is stored in LOG..
    >
    > Command:'iptables -A INPUT -p TCP --dport 8000 -j LOG'.
    >
    > can anybody suggest how to get the IPaddress and portno of the logged packet.
    >
    >Regards,
    >Rupesh.
    >
    >
    Mr. Rupesh,

    although you didn't want to contribute to your previous thread named
    "How I can send a Packet to every Body on Internet" we can answer
    questions regarding the security of your box.

    You could use in conjunction with that iptables command the --log-prefix
    switch kinda like this:
    iptables -A INPUT -p TCP --dport 8000 -j LOG --log-prefix
    "crap_that_will_identify_the_log_rule"

    After that you can use this command to get the entries in the syslogd log file:
    cat /var/log/syslog|grep "crap_that_will_identify_the_log_rule".

    The misteries involving this can be read with the command that unlocks the power of the iptables:
    man iptables

    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: Crucificator: "Re: IP address resolution."

    Relevant Pages

    • Re: iptables redirect question.
      ... > I have a question on the use of iptables. ... packet was heading to. ... Prev by Date: ...
      (comp.os.linux.networking)
    • Re: IPTABLES
      ... > I need to setup the firewall IPTABLES on CentOS. ... You set up the firewall using command line commands. ... > allow to acces FROM the LAN only to a computer with MAC ADRESS xxxxxx. ...
      (comp.os.linux.setup)
    • Re: Odd tcp dump? was: ssh working with dialup, not through router
      ... and try to run the iptables command you ... debug3: tty_make_modes: 91 1 ... debug1: fd 3 setting TCP_NODELAY ...
      (Fedora)
    • Re: Blocking incoming IP address immediately
      ... > iptables service, it continues to let him stay in. ... This does the same thing as your rules-save command, ... "Roger Wilco" game are one and the same machine??? ...
      (comp.os.linux.security)
    • Re: RPM problem on FC3/x86_64
      ... Now it's downloading and upgrades. ... > What's with the command line rpm? ...
      (Fedora)