Tom Eastep wrote:
> Andrew Suffield wrote:
>> [...]
>>
>>               LOG    Simply log the packet and continue with the next rule.
> 
> And be sure to put the appropriate log rules in all three sections of the
> rules file.

Okay, this is what I've got:

SECTION ESTABLISHED
# NetFlow logging
LOG:ULOG        all             net
LOG:ULOG        net             all
SECTION RELATED
# NetFlow logging
LOG:ULOG        all             net
LOG:ULOG        net             all
SECTION NEW
# NetFlow logging
LOG:ULOG        all             net
LOG:ULOG        net             all
<all of my accept rules follow>

and it seems to be working.  Thanks!

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA/CoRA Division                    FAX: 303-415-9702
3380 Mitchell Lane                  [EMAIL PROTECTED]
Boulder, CO 80301              http://www.cora.nwra.com

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to