Fedora logging ?

b_unix · 03-19-2009, 10:22 AM

One of the reasons I prefer to use a linux derivative for most of my needs is the power of the information that is available within the logs.
I've recently upgraded to Fedora 9 x64, Googole it to death but I have found little on line resources on how or why IE: my iptables are not logged to the dir iptables4/6 specified or to /var/log/messages ? anything that's within messages can be mirrored via demesg ? but nothing else is logged? could someone point me in the correct direction to get this resolved please.

**Note I would prefer to stay within the realm of selinux security model

This is most likly a config issue

rsyslog.conf
------------

$ModLoad imuxsock.so
$ModLoad imklog.so
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.*
kern.warning /var/log/iptables.log

--------------

I've had issues while mounting NFS disks that do not get mounted or go offline ? this appears to be a driver issue within the hardware (have a notoriously buggy board) have yet to see a log of these issues before or after a restart ?

is debug an option?

anomie · 03-19-2009, 10:59 AM

AFAIK, iptables will not perform logging about rule matches unless you explicitly tell it to, a la:

Code:

# Log / allow in ssh
/sbin/iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j LOG
/sbin/iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

See the manpages for iptables(8) -- the LOG section in particular.