Gentoo Archives: gentoo-security

From: Lasse Birnbaum Jensen <gymer@××××××××××××××××××.dk>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] How to make iptables log to a separate log file?
Date: Sun, 27 Nov 2005 15:56:14
Message-Id: 4389D4CC.10203@odense.kollegienet.dk
In Reply to: [gentoo-security] How to make iptables log to a separate log file? by Abhay Kedia
Try using ULOG with the ULOGD daemon

> I have installed iptables yesterday and currently using a basic script from > web to enable firewall. The script logs the dropped packets using following > entries > > /sbin/iptables -A INPUT -j LOG --log-prefix "FIREWALL:INPUT " > /sbin/iptables -I INPUT 1 -p tcp -m state --state INVALID -j LOG --log-prefix > "FIREWALL:INVALID " > > iptables seem to be working fine but the problem is that it is logging > everything in /var/log/messages but I want it to log it some other file. May > be /var/log/iptables. I have googled and found that syslog-ng can do it and > some entries in /etc/syslog-ng/syslog-ng.conf should work but I am not sure > how to do it. "man syslog-ng.conf" is not making much sense for me either > (newbie). > > Can some one please give me any links where I can read about how to easily > configure syslog-ng.conf and achieve what I desire. If you could give exact > entries then I would be more than greatful. > > TIA > Regards, > Abhay Kedia
-- Venlig hilsen / Best regards Lasse Birnbaum Jensen -- gentoo-security@g.o mailing list

Replies

Subject Author
Re: [gentoo-security] How to make iptables log to a separate log file? Andreas Herrmann <sma@××××××××××××××××××.de>