I have several ipchain rules. One of them is:
ipchains -A input -i ppp0 -p TCP --destination-port 21 -l -j DENY
Why are these ipchains not doing any logging? I do have the -l option
invoked for logging. The packet is supposed to be denied at the IP level
and then logged into syslog. When I try to connect from another address to
the IP address of the ppp0 interface, nothing gets logged. Instead, the tcplogd daemon
captures it into the log. tcplogd is an application level filter and not at IP level.
Why is this ipchains rule (and others) not getting logged?
The kernel is 2.2.14.
None of the connections to the services are getting logged by ipchains filters.
I have used nmap on the ppp0 interface and yet it is not getting logged.
How are you auditing your services on the ppp0 interface? What options in ipchains
are you using to do the logging?
Thank you in advance.
Subba Rao
subb3 at attglobal.nethttp://pws.prserv.net/truemax/
=> Time is relative. Here is a new way to look at time. <=
http://www.smcinnovations.com
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!