DOH! looks like rsyslog didn't make it through the upgrade for some reason. installed, all good now.. thanks for pointing me in the right direction.
________________________________________ From: Tom Eastep [[email protected]] Sent: Thursday, July 10, 2014 2:36 PM To: [email protected] Subject: Re: [Shorewall-users] Logging question On 7/10/2014 8:21 AM, Mallory, Danny wrote: > Hello > I just upgraded from Debian 6(squeeze) to Debian 7(Wheezy) and my logging does not seem to be working anymore. "shorewall show log" looks normal pointing to /var/log/messages but I get no logging of drops or rejects anymore. It appears to be doing kernel level logging as the messages are showing up via dmesg but not in any real log file. Is this a known issue? No. > > Here are a couple of telnet test and output showing up in dmesg. > > [ 2624.917558] Shorewall:net2fw:DROP:IN=eth0 OUT= > MAC=00:50:56:ab:29:5a:a4:4c:11:e5:6b:00:08:00 SRC=10.132.230.254 > DST=10.132.194.109 LEN=60 TOS=0x00 PREC=0x00 TTL=62 ID=11800 DF PROTO=TCP > SPT=54655 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 > [ 2625.919632] Shorewall:net2fw:DROP:IN=eth0 OUT= > MAC=00:50:56:ab:29:5a:a4:4c:11:e5:6b:00:08:00 SRC=10.132.230.254 > DST=10.132.194.109 LEN=60 TOS=0x00 PREC=0x00 TTL=62 ID=28097 DF PROTO=TCP > SPT=54656 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 > > > nothing in /var/log/messages (or any other log file) > Look at your rsyslog configuration -- if the messages are showing up in dmesg, then is certainly isn't a Shorewall issue. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car https://urldefense.proofpoint.com/v1/url?u=http://shorewall.net/&k=%2FbkpAUdJWZuiTILCq%2FFnQg%3D%3D%0A&r=HPUxQbufZnCuDwgRWQG%2BIhr9Sf2ayuw1c7jyyvlI3wQ%3D%0A&m=Z95wq8eDS8jg8Lc1t%2F7ZTsuxVtAr%2BnJCTWT8yYygza0%3D%0A&s=121b4ca57625cd173f5badf71f87ac4d1d13743279573da7e9e62f189a0da244 \________________________________________________ _____________ The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. ------------------------------------------------------------------------------ Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
