Re: how to log iptables

[Aro Sadoyan <aro@eif.am>]

itachi@cnt.uo.edu.cu wrote:

> hey
> how can i add a rule on my iptables to log the connections to my computer?
>
>
>
> -------------------------------------------------
>                           Luis A. Rondon Paz
>    L I N U X       .~.    Admin intranet CNT
>   The  Choice      /V\    icq #132736035
>    of a GNU       /( )\   itachi@cnt.uo.edu.cu
>   Generation      ^^-^^    Santiago de cuba
>                   UONET
>
>
>
>
>
>
>
>           ###########
>         ###############
>       ####           ####
> -   ,$$P'               ###
> - ',$$P       ,-***      ###
> - `d$$'     ,##    *     ###
> -  $$P      ##     *     ###
> -  $$:      ##   -      ###
> -  $$;      ###       ###
> -  Y$$.    `   #######
> -  `$$b      "-.__
> -   `Y$$b
> -    `Y$$.
> -      `$$b.
> -        `Y$$b.
> -          `"Y$b._
> -------------------------------------------------
>
>
>
>  
iptables -A INPUT   -j LOG --log-level debug --log-prefix INPUT
iptables -A OUTPUT  -j LOG --log-level debug --log-prefix OUTPUT
iptables -A FORWARD -j LOG --log-level debug --log-prefix FORWARD
iptables -t nat -A OUTPUT      -j LOG --log-level debug --log-prefix 
"NAT OUTPUT"
iptables -t nat -A PREROUTING  -j LOG --log-level debug --log-prefix 
PREROUTING
iptables -t nat -A POSTROUTING -j LOG --log-level debug --log-prefix 
POSTROUTING