> Mira, s�n l�nies com aquestes: > > Jan 30 16:53:25 apta kernel: RPC:IN=eth0 OUT= > MAC=00:0b:6a:95:5f:63:00:a0:c5:8f:58:65:08:00 SRC=80.15.248.24 > DST=192.168.1.31 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=15100 DF PROTO=TCP > SPT=53976 DPT=111 WINDOW=5840 RES=0x00 SYN URGP=0 > > Jan 30 16:53:28 apta kernel: RPC:IN=eth0 OUT= > MAC=00:0b:6a:95:5f:63:00:a0:c5:8f:58:65:08:00 SRC=80.15.248.24 > DST=192.168.1.31 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=15101 DF PROTO=TCP > SPT=53976 DPT=111 WINDOW=5840 RES=0x00 SYN URGP=0 > > (S�n dues l�nies, tallades per a que resulten m�s legibles) > > Faig servir syslog, simplement.
Perdona haver tardat tant, resulta q el teu correu m'havia quedat
abandonat per aki... :_
La soluci� q et dono, �s instal�lar el paquet syslog-ng, i aplicar-hi un
filtre, �s a dir:
apt-get install syslog-ng
i afegir unes linies com les seg�ents a
l'arxiu /etc/syslog-ng/syslog-ng.log:
destination iptables-log { file("/var/log/iptables.log" owner("root")
group("adm") perm(0640)); };
filter iptables { match ("RPC"); };
log { source(src); filter(iptables); destination(iptables-log); };
Ja diras si et va b�.
Sort!
--
Albert Sellar�s GPG id: 0xB88C621A
http://www.wekk.net [EMAIL PROTECTED]
Membre de Catux.org http://catux.org
Linux User: 324456 Catalunya
signature.asc
Description: =?ISO-8859-1?Q?Aix=F2?= =?ISO-8859-1?Q?_=E9s?= una part d'un missatge, signada digitalment
