Re: help - log iptables
2011/4/1 Flavio A. Reis <firstname.lastname@example.org>:
> friends, you can log into all that iptables is being blocked without logging
> rules ACCEPT.
> My Firewall has only opened the ports (80, 443, 53).
> You can log all other connection attempts?
- Set Default Policy for INPUT to DROP
- Create Rule for ACCEPT 80,443,53
- Append logging Rule (if the packets end here, it will be dropped);
maybe with Prefix "DROP:"
- change logrotate rules (you will get a lot of log entries).