From: Jeffrey Laramie <JALaramie@Loudoun-Fairfax.com>
To: "David C. Hart" <DCH@TQMcube.com>
Cc: iptables mailing list <netfilter@lists.netfilter.org>
Subject: Re: Couple More Questions
Date: Thu, 30 Oct 2003 15:34:36 -0500 [thread overview]
Message-ID: <3FA175DC.3020108@Loudoun-Fairfax.com> (raw)
In-Reply-To: <1067540253.2895.44.camel@main.tqmcube.com>
David C. Hart wrote:
>I've read the tutorial but a couple of doubts linger.
>
>1. Since I'm only logging rejected packets, any suggestions on getting
>name resolution into the log?
>
>
I'm not clear what you want to do. Do you want to do a DNS lookup on the
rejected packet source IP and log the source name rather than the IP? If
so I don't know of any way to change the content of the log entries
generated by netfilter. You could always write a script to parse the
logs, resolve the IP, and re-log it with the name.
>2. I'm still a bit confused on the logging of the destination address.
>With our one static IP, there are two possibilities. Either a packet is
>intended for our IP or for another. Yet, the logs will always show the
>destination address as the IP of the LAN interface. Any suggestions?
>
>
You're receiving packets from the outside world destined for your
private lan IP address? Could you post the relevant rules from your
chain and a few log entries that show this?
Jeff
next prev parent reply other threads:[~2003-10-30 20:34 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-10-30 18:57 Couple More Questions David C. Hart
2003-10-30 19:06 ` Robert P. J. Day
2003-10-30 19:14 ` David C. Hart
2003-10-30 20:34 ` Jeffrey Laramie [this message]
-- strict thread matches above, loose matches on Subject: below --
2003-10-30 21:04 Daniel Chemko
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3FA175DC.3020108@Loudoun-Fairfax.com \
--to=jalaramie@loudoun-fairfax.com \
--cc=DCH@TQMcube.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.