Re: iptables logging

From: Andreas Wilm (wilm_at_biophys.uni-duesseldorf.de)
Date: 03/26/04 

Date: Fri, 26 Mar 2004 12:58:59 +0100

Hi,

> However I want to log dropped/rejected connection attempts from certain
> netblocks until I am sure that I have got it right.
>
> /sbin/iptables -A INPUT -p all -i eth1 -s x.x.x.0/24 -j LOG
> /sbin/iptables -A INPUT -p all -i eth1 -s x.x.x.0/24 -j REJECT
>
> I expected this to log to /var/log/messages, but nothing seems to be
> showing up. Have I got the syntax wrong, or does the logging go elsewhere?

The syntax is okay, I think.
Maybe you should insert this rules very early in your rule-set, and not
at the end, where some other (terminating) matches might already have
ended the packet chain traversal.

Regards,
Andreas 

-- 
Andreas Wilm
===========================================
Heinrich-Heine-Universitaet Duesseldorf
Institut fuer Physikalische Biologie
http://www.biophys.uni-duesseldorf.de/
http://www.biophys.uni-duesseldorf.de/~wilm

Relevant Pages

  • Re: generics collection question
    ... the syntax and I wasn't able to find an example showing what I wanted. ... Who is Mighty Abbott? ... A twin-turret scalawag. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: iptables logging
    ... > showing up. ... Have I got the syntax wrong, or does the logging go elsewhere? ... > I would have expected some conection attempts since I inserted the LOG ...
    (comp.os.linux.security)
  • Re: iptables logging
    ... >> showing up. ... Have I got the syntax wrong, or does the logging go ... I would have expected some conection attempts since I ...
    (comp.os.linux.security)
  • RE: ObjectPooling Problem
    ... There is a problem in your syntax... ... "Ladis" wrote: ... Error cursor is showing the first line. ...
    (microsoft.public.dotnet.framework.interop)
  • Re: Need more than 64 bits for mask - Long data type
    ... Looks promising. ... Thanks for showing the syntax for checking the bits - that ... What would the syntax look like for setting the bits? ... > public enum Bits { ...
    (microsoft.public.dotnet.languages.csharp)