Re: [CentOS] how to get iptables rule to log actions?

2009-04-06 Thread Ian Blackwell

Rudi Ahlers wrote:
 I have the following options in /etc/sysconfig/iptables:


 -A RH-Firewall-1-OUTPUT -d 87.89.180.50 -j LOG
 -A RH-Firewall-1-OUTPUT -d 87.89.180.50 - j DROP
   
Perhaps it is the space between the hyphen and the j on your second line?

Ian
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to get iptables rule to log actions?

2009-04-06 Thread Ian Blackwell
Rudi Ahlers wrote:
 On Mon, Apr 6, 2009 at 2:04 PM, Ian Blackwell i...@ikel.id.au wrote:
   
 Rudi Ahlers wrote:
 
 I have the following options in /etc/sysconfig/iptables:


 -A RH-Firewall-1-OUTPUT -d 87.89.180.50 -j LOG
 -A RH-Firewall-1-OUTPUT -d 87.89.180.50 - j DROP

   
 Perhaps it is the space between the hyphen and the j on your second line?

 Ian
 ___
 

 Hi Ian,

 There's no space, I made a typo when I typed what I saw. I can't copy
  past from the remote KVM.

   
Excusing the space, your syntax looks OK - as long as you have something
like this at the top of your file:-
:RH-Firewall-1-OUTPUT - [0:0]

Can you send more detail about your OUTPUT chain?

Ian
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to get iptables rule to log actions?

2009-04-06 Thread Rudi Ahlers
On Mon, Apr 6, 2009 at 2:14 PM, Ian Blackwell i...@ikel.id.au wrote:
 Rudi Ahlers wrote:
 On Mon, Apr 6, 2009 at 2:04 PM, Ian Blackwell i...@ikel.id.au wrote:

 Rudi Ahlers wrote:

 I have the following options in /etc/sysconfig/iptables:


 -A RH-Firewall-1-OUTPUT -d 87.89.180.50 -j LOG
 -A RH-Firewall-1-OUTPUT -d 87.89.180.50 - j DROP


 Perhaps it is the space between the hyphen and the j on your second line?

 Ian
 ___


 Hi Ian,

 There's no space, I made a typo when I typed what I saw. I can't copy
  past from the remote KVM.


 Excusing the space, your syntax looks OK - as long as you have something
 like this at the top of your file:-
 :RH-Firewall-1-OUTPUT - [0:0]

 Can you send more detail about your OUTPUT chain?

 Ian
 ___


Aha, that's what I've missed :)


-- 

Kind Regards
Rudi Ahlers
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos