Discussion Locked

ipchains

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I want to have all traffic that goes through my firewall logged for a short period of time. I created a small script that I thought had worked to do just that in the past. I can't figure out why it is not logging all traffic. Here are my rules:
ipchains -F
ipchains -P input ACCEPT
ipchains -P output ACCEPT
ipchains -P forward ACCEPT
ipchains -A input -j ACCEPT -l
ipchains -A output -j ACCEPT -l
ipchains -A forward -j ACCEPT -l

I want everything to go through, yet I want it to log everything as well. Right now everything goes through, yet nothing is logged. Thanks for any help you can provide.

6 replies

by cp409sd

root 421 1 0 Mar07 ? 00:04:29 syslogd -m 0

Looks to me like it is running, as far as I can tell.

by gregory pleau

As far as I can tell the default policy is to ACCEPT (ipchains -P input ACCEPT) so IPCHAINS has no reason to process the directive with the -l logging option.

Turn off those default policies or better still, use -P input DENY to safeguard your system better.

by cp409sd

Forgot about this question...not really an issue anymore, but thanks for the help.

This discussion is closed to new replies.