1
vote
1answer
111 views

Ubuntu iptables logs not going to any log file

I am trying to put logs in iptables but I can not find any log in any file. Although when I run dmesg command, I can see the iptables entries. But the same entry doesn't go to any log file. Here is ...
1
vote
1answer
50 views

Logging in iptables

I have created rules in iptables to log and edited the rsyslog.conf file to output any message which contains "iptables" to a different log file. It seems that it is logging to both places, the ...
3
votes
2answers
475 views

What is this in my syslog and should I be concerned?

I'm seeing a lot of the following line in /var/log/syslog: Jun 21 14:36:15 my-server kernel: [416219.080061] iptables denied: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:the-mac-address:08:00 SRC=0.0.0.0 ...
1
vote
1answer
122 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
0
votes
1answer
300 views

Kernel Logging disabled?

uname -a Linux host 2.6.32-279.9.1.el6.i686 #1 SMP Tue Sep 25 20:26:47 UTC 2012 i686 i686 i386 GNU/Linux And start ups: ls /etc/init.d/ abrt-ccpp certmonger dovecot irqbalance ...
1
vote
1answer
1k views

Why does iptables output to /dev/console?

For some reason I see the output from this iptables rule $IPT -A FORWARD --jump LOG $IPT -A FORWARD --jump ACCEPT on the console eventhough I have disabled kern in /etc/syslog.conf #kern.* ...
1
vote
1answer
291 views

What do the extra parts of the iptables ping log entry mean?

I'm dropping all ICMP type 8 packets on the INPUT chain and so now I'm seeing log entries as a Fabric script tries to contact another server, like this: kernel: INPUT DROP IN=eth0 OUT= ...
1
vote
1answer
418 views

my central syslog server appears to discard remote messages

I have added the remote option to the /etc/sysconfig/syslog SYSLOGD_OPTIONS="-m0 -r " and restarted and its definitely listening on the syslog port; # netstat -lnu | grep 514 udp 0 0 ...