iptables logging

Brad Chapman kakadu@earthlink.net
Sun, 29 Jul 2001 20:21:45 -0400


Mr. aaz, Mr. Guilmette,

   To answer Mr. aaz's question, you can configure syslogd to route 
kernel messages
to another file, or to another system if you like. To answer Mr. 
Guilmette's question,
no. Not for the LOG target. However, the ULOG target, in combination 
with ulogd (IIRC)
can log stuff to a different spot. LOG just uses printk(), and klogd 
logs all printk()s
from the kernel with the kern.* facility.

Brad

aaz wrote:

> piggybacking on Ronalds question, how do you specify the log file to log to
> rather than everything going to messages?
> 
> ----- Original Message -----
> From: "Ronald F. Guilmette" <rfg@monkeys.com>
> To: <netfilter@lists.samba.org>
> Sent: Sunday, July 29, 2001 6:00 PM
> Subject: iptables logging
> 
> 
>> I am new to iptables, and I have a trivia question...
>> 
>> Is there any easy way to arrange for the Linux iptables LOG target (or
>> some other user-defined target) to log stuff to the syslog security.*
>> facility, rather than to the kern.* facility?
>> 
>> If so, I'd really like to do that.  It will make me a bit more comfortable
>> as I administer both FreeBSD and Linux systems.  (On FreeBSD, firewall
>> logging goes to the security.*/auth.* facility.)
>> 
>>