iptables logging

iptables logging

[Stephen Clark]

Hello,

Is there a way to have iptables LOG using a 
facility other than "kern".
I would like to
segregate out the messages from iptables into a 
file separate from
/var/log/messages.

Any advice would be appreciated.

Steve

-- 

"They that give up essential liberty to obtain 
temporary safety,
deserve neither liberty nor safety."  (Ben Franklin)

"The course of history shows that as a government 
grows, liberty
decreases."  (Thomas Jefferson)

Re: iptables logging

[Jan Engelhardt]

On Nov 15 2007 15:31, Stephen Clark wrote:
>
> Hello,
>
> Is there a way to have iptables LOG using a facility other than "kern".
> I would like to
> segregate out the messages from iptables into a file separate from
> /var/log/messages.
>
> Any advice would be appreciated.

You should use syslog-ng, which allows text matching and filtering.
This is from a regular openSUSE install:

	filter f_iptables   { facility(kern) and match("IN=") and match("OUT="); };

Or, you can use the ULOG target together with ulogd2.

Re: iptables logging

[Stephen Clark]

Jan Engelhardt wrote:

>On Nov 15 2007 15:31, Stephen Clark wrote:
>  
>
>>Hello,
>>
>>Is there a way to have iptables LOG using a facility other than "kern".
>>I would like to
>>segregate out the messages from iptables into a file separate from
>>/var/log/messages.
>>
>>Any advice would be appreciated.
>>    
>>
>
>You should use syslog-ng, which allows text matching and filtering.
>This is from a regular openSUSE install:
>
>	filter f_iptables   { facility(kern) and match("IN=") and match("OUT="); };
>
>Or, you can use the ULOG target together with ulogd2.
>
>
>  
>
Hi Jan,

Thanks for taking the time to reply. I'll check them both out.

Steve

-- 

"They that give up essential liberty to obtain temporary safety, 
deserve neither liberty nor safety."  (Ben Franklin)

"The course of history shows that as a government grows, liberty 
decreases."  (Thomas Jefferson)