Re: Firewall froth..

2008-04-16 Thread Anthony Campbell
On 15 Apr 2008, Digby Tarvin wrote: [snip] where the list line was to filter out the most frequent messages, but I am not really sure what, if any, rejected connections/packets I should be looking out for, and what should just be ignored... Perhaps I should redirect the firewall logs to a

Re: Firewall froth..

2008-04-16 Thread Jon
On Wed, Apr 16, 2008 at 10:00:37AM +0100, Anthony Campbell wrote: You can prevent this stuff appearing by inserting klogd -c5 to /etc/init.d/klogd. See /www.shorewall.net/FAQ.htm. It's better to modify /etc/default/klogd. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: Firewall froth..

2008-04-16 Thread Anthony Campbell
On 17 Apr 2008, Jon wrote: On Wed, Apr 16, 2008 at 10:00:37AM +0100, Anthony Campbell wrote: You can prevent this stuff appearing by inserting klogd -c5 to /etc/init.d/klogd. See /www.shorewall.net/FAQ.htm. It's better to modify /etc/default/klogd. Looking at that, I see: # Use

Firewall froth..

2008-04-15 Thread Digby Tarvin
My personal system is connected to the Internet via an ADSL router which doesn't give me any information about what doesn't get through. However I recently helped a friend setup a Debian box to act as firewall/router between his cable modem and local LAN, which has given me access to a lot more

Re: Firewall froth..

2008-04-15 Thread Brian McKee
On 15-Apr-08, at 11:42 AM, Digby Tarvin wrote: The problem I am having is that the messages from the firewall really flood /var/log/messages to the point where I am concerned they may cause me to miss other important things. ... Perhaps I should redirect the firewall logs to a separate file?

Re: Firewall froth..

2008-04-15 Thread Digby Tarvin
On Tue, Apr 15, 2008 at 01:23:59PM -0400, Brian McKee wrote: On 15-Apr-08, at 11:42 AM, Digby Tarvin wrote: The problem I am having is that the messages from the firewall really flood /var/log/messages to the point where I am concerned they may cause me to miss other important things. ...

Re: Firewall froth..

2008-04-15 Thread Alex Samad
On Tue, Apr 15, 2008 at 08:06:01PM +, Digby Tarvin wrote: On Tue, Apr 15, 2008 at 01:23:59PM -0400, Brian McKee wrote: On 15-Apr-08, at 11:42 AM, Digby Tarvin wrote: The problem I am having is that the messages from the firewall really flood /var/log/messages to the point where I am

Re: Firewall froth..

2008-04-15 Thread Douglas A. Tutty
On Tue, Apr 15, 2008 at 03:42:54PM +, Digby Tarvin wrote: where the list line was to filter out the most frequent messages, but I am not really sure what, if any, rejected connections/packets I should be looking out for, and what should just be ignored... Perhaps I should redirect the