How you not log a certain IP?

IRIGHTI · 10-06-2004, 12:45 PM

I use this to log all the packets to my system to syslog:

iptables -A INPUT -j LOG --log-prefix "FIREWALL:INPUT "

How would I not log a certain IP on my network so the log isn't cluttered up?

jschiwal · 10-06-2004, 03:19 PM

I got this from a web page at http://techrepublic.com.com/5100-6261-1031075-2.html .
It limits the amount of information logged for a particular source IP address in a similar way you would protect against SYN dos attacks.

iptables -A INPUT -s 192.168.1.25 -m limit --limit 1/minute –j LOG

Capt_Caveman · 10-06-2004, 05:05 PM

Or you can just use the source address with the "!"argument. So if you want to ignore the IP 1.2.3.4 host:

iptables iptables -A INPUT -s ! 1.2.3.4 -j LOG --log-prefix "FIREWALL:INPUT "

IRIGHTI · 10-06-2004, 08:12 PM

Sweet. Thanks guys!