how can I see firewall (iptables) logging? (e.g. unsuccessful incoming attempts)

callagga · 06-28-2009, 05:02 AM

Hi,

How can I view in real time firewall blocking activity? For example incoming attempts that are being blocked, or outgoing.

Some info:
* I'm using clarkconnect which is based on Centos I think.
* I don't seem to see anything in /var/log/messages to reflect any logging.
* iptables --version ==> iptables v1.3.5
* I looked in /etc/sysconfig/ but did not find any file called iptables

Thanks

repo · 06-28-2009, 05:09 AM

Which firewall are you using?

You need to enable logging in your firewall script.
Take a look at
http://www.linuxquestions.org/questi...ogging-385165/

callagga · 06-28-2009, 05:36 AM

Quote:

Originally Posted by repo

Which firewall are you using?

Its the firewall that comes with ClarkConnect (the linux based firewall). It seems to use iptables under the bonnet if this answers the question?

callagga · 06-28-2009, 05:37 AM

Quote:

Originally Posted by repo

You need to enable logging in your firewall script.
Take a look at http://www.linuxquestions.org/questi...ogging-385165/

I'm actually not entirely sure where to change things here? I can't find the config file (as mentioned earlier), and any firewall changes I make I make them through the clarkconnect web interface.

Any ideas?

repo · 06-28-2009, 05:40 AM

Perhaps you can find some pointers at
http://www.clarkconnect.com/help/userguide/

callagga · 06-28-2009, 05:45 AM

Quote:

Originally Posted by repo

Perhaps you can find some pointers at
http://www.clarkconnect.com/help/userguide/

no really - that just goes over help for the user web interface application - my question starts to dig deeper below what's possible in the web interface

repo · 06-28-2009, 05:49 AM

http://www.clarkconnect.com/docs/Rep...sion_Detection

callagga · 06-28-2009, 06:31 AM

Quote:

Originally Posted by repo

http://www.clarkconnect.com/docs/Rep...sion_Detection

thanks - the high level graphs look nice, but what I'm trying to find is a way to monitor in real time, like "tail" a log file for example.