| View previous topic :: View next topic |
| Author |
Message |
alexeen
n00b
Joined: 30 Jul 2005
Posts: 9
Location: Canada
|
 Posted: Mon Nov 21, 2005 5:20 pm Post subject: Iptables ULOG obsolete, how to do userspace logging? |
 |
|
Hi,
I'm wondering if anyone know how to set up logging for iptables with NETLINK stuff as the ULOG option is now obsolete. 
Thanx. |
|
| Back to top |
|
 |
limn
l33t
Joined: 13 May 2005
Posts: 997
|
| Posted: Wed Nov 23, 2005 1:52 pm Post subject: |
|
|
Try enabling Netfilter netlink interface and Netfilter LOG over NFNETLINK interface and disable ULOG target support.
| Code: | Networking options --->
[*] Network packet filtering (replaces ipchains) --->
<*> Netfilter netlink interface
< > Netfilter NFQUEUE over NFNETLINK interface (NEW)
<M> Netfilter LOG over NFNETLINK interface
IP: Netfilter Configuration --->
< > ULOG target support (OBSOLETE) |
It doesn't appear that any changes are needed for iptables rules or ulogd. |
|
| Back to top |
|
|
alexeen
n00b
Joined: 30 Jul 2005
Posts: 9
Location: Canada
|
| Posted: Wed Nov 23, 2005 2:00 pm Post subject: |
|
|
Thanx for the reply, but say if I have a line like:
iptables .... --ulog-prefix "REJECT: " --ulog-qthreshold 10
What args do I use now to control prefix and qthreshold? 
Thank you. |
|
| Back to top |
|
|
limn
l33t
Joined: 13 May 2005
Posts: 997
|
| Posted: Wed Nov 23, 2005 4:21 pm Post subject: |
|
|
The iptables arguments shouldn't change. The kernel configuration would.
I made the kernel config changes on a box yesterday and -j ULOG worked.
I just tried to replicate that on another box today and it is failing.
I rebooted the first box and it is failing there now.
Not sure yet what is going on. |
|
| Back to top |
|
|
alexeen
n00b
Joined: 30 Jul 2005
Posts: 9
Location: Canada
|
|
| Back to top |
|
|
limn
l33t
Joined: 13 May 2005
Posts: 997
|
| Posted: Wed Nov 23, 2005 8:07 pm Post subject: |
|
|
I was confused when I thought I had it working....
Looks like these are needed:
libnfnetlink
libnetfilter_log
etc
You may want to fill out a bug report requesting ebuild(s). |
|
| Back to top |
|
|
MrUlterior
Guru
Joined: 22 Mar 2005
Posts: 511
Location: Switzerland
|
| Posted: Thu Nov 24, 2005 9:18 am Post subject: |
|
|
Perhaps this (http://www.nufw.org) is what you're looking for?
_________________
Misanthropy 2.0 - enough hate to go around
|
|
| Back to top |
|
|
alexeen
n00b
Joined: 30 Jul 2005
Posts: 9
Location: Canada
|
|
| Back to top |
|
|
MrUlterior
Guru
Joined: 22 Mar 2005
Posts: 511
Location: Switzerland
|
|
| Back to top |
|
|
|
Networking & Security
