[plug] Logging Problem - iptables

Niffum niffum at touch88.com.au
Wed Jan 30 12:39:48 WST 2002


I use to use ipchains and it had no problem loggin these to
/var/log/messages.  Now i'm using iptables, it no longer logs to
/var/log/messages.  Ive tried changing the log level, in the iptables
command, to several different values, but nothing seems to work. Does any
one know how i can fix this problem?  Maybe i can get it to log to a
specific file say /var/log/firewall ?

I'm using iptables to log, just icq add requests for now, as follows :-

<SNIP>
iptables -t nat -A PREROUTING -i eth0 -p tcp -d ads.web.aol.com -j ICQ
iptables -t nat -A PREROUTING -i eth0 -p tcp -d ads.icq.com -j ICQ
...
iptables -t nat -A ICQ -p tcp -j LOG --log-level 5 --log-prefix "ICQ: "
iptables -t nat -A ICQ -j DNAT --to 192.168.0.1
<SNIP>

Using "grep ICQ /var/log/*" it returns nothing.

If i type "dmesg" it returns thigns like:-
ICQ: IN=eth0 OUT= MAC=00:a0:c9:8b:94:13:00:60:67:79:ae:a9:08:00
SRC=192.168.0.101 DST=152.163.226.185 LEN=48 TOS=0x00 PREC=0x00 TTL=128
ID=6936 DF PROTO=TCP SPT=4497 DPT=80 WINDOW=16384 RES=0x00 SYN URGP=0

I'm running Debian, with kernel 2.4.5 (woody).

- Niffum





More information about the plug mailing list