I made the following changes to /etc/sysconfig/iptables
-A INPUT -s 0.0.0.0 -d 192.168.132.81 -p tcp -m tcp --dport 8000 -j LOG --log-prefix "TrialIpTables"
I was hoping to see a log whenever I access port 8000 of 192.168.132.81. However, I don't see anything in /var/log/messages. I have no idea how to start troubleshooting this.
I think the problem is the source address: when trying to accessing that port, you're not coming from 0.0.0.0. Try a source address with a broader netmask (/0), or, and this is the more sensible option, no source address at all.
Also, when troubleshooting IP tables, an /sbin/iptables -L -v will show how many packets and bytes have matched against a particular rule - in your case I believe it will be 0.
First of all, your log messages would probably be in syslog, not message. Try grep TrialIpTables /var/log/*.
Secondly, iptables may not create a log entry unless it blocks something or unless you turn the log level up. Those items you could lookup in the iptables documentation, but I think you might want to consider that this is actually a Bad Plan™. By doing excessively verbose logging like tracking all hits on a tcp port, you are creating a new attack surface. All somebody needs is to flood that port with connection requests and they will fill up your hard drive with log messages!
Perhaps you could think of another strategy to log access at a lower-verbosity point in the connection chain or reconsider how much information you need.
