ipchains

[Ron Cornwell]

Is there any logging that goes with ipchains to record sucess and denies of packets. I am using RedHat 7.0 with linux kernel 2.2.16 . Thanks

[Mark Fenton]

What getslogged depends on how you've set things up. To see what rules are currently established (and whether the results are logged):

# service ipchains status

This will produce a listing of the current rules. An "l" in the modifiers block of a line indicates the event is logged.

If you are not logging kernel events separately from other system logs, check /var/log/messages . Logging level can be changed in the syslog.conf file.

An excellent How To is available here:
http://linuxdocs.org/HOWTOs/IPCHAINS-HOWTO.html
see also the docs on masquerading (also on this site)

Most firewall configuration programs also come with adequate documentation of the ipchains that they employ.

Hope this helps

[Bryce Dunn]

add a -l to any ip chains line in your firewall configuration that you want to log.