Hi,

to debug something, I want to log everything from/to a specific IPv4,
shorewall (iptables) sees.

>From what I read I think 'shorewall iptrace -d 1.2.3.4' and 'shorewall
iptrace -s 1.2.3.4' should do the job.

I verified the raw tables:

# iptables -L -v -t raw -n
Chain PREROUTING (policy ACCEPT 286 packets, 21942 bytes)
 pkts bytes target     prot opt in     out     source
destination
    5   374 TRACE      all  --  *      *       1.2.3.4
0.0.0.0/0
    0     0 TRACE      all  --  *      *       0.0.0.0/0
1.2.3.4

Chain OUTPUT (policy ACCEPT 265 packets, 61940 bytes)
 pkts bytes target     prot opt in     out     source
destination
    0     0 TRACE      all  --  *      *       1.2.3.4
0.0.0.0/0
    8 14764 TRACE      all  --  *      *       0.0.0.0/0            1.2.3.4


But /var/log/syslog, /var/log/messages and /var/log/kern.log is empty.

Other messages from shorewall (for example I log connections from
blacklist sources) I see in /var/log/kern.log, so I think logging at
all should be working.

Am I doing something wrong?

I am using shorewall 4.5.17.1.


-- 
Regards,
Igor

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to