debian lenny iptables does not logs

hello everybody.

I have problem with loging, actually iptables logs a data but it seems that for some reasons does not writes in a log file:

iptables -L -v
Chain INPUT (policy ACCEPT 406 packets, 124K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  any    any     xxxxxxxxxxx        anywhere            tcp dpt:xxxx
    0     0 ACCEPT     udp  --  any    any    xxxxxxxxxxx        anywhere            udp dpt:xxxx
  322 23848 LOG        tcp  --  any    any     anywhere             anywhere            tcp dpt:ssh LOG level warning 
    0     0 ACCEPT     tcp  --  any    any     xxxxxxxxxxx  anywhere            tcp dpt:ssh 
  322 23848 ACCEPT     tcp  --  any    any     xxxxxxx         anywhere            tcp dpt:ssh 
    0     0 ACCEPT     tcp  --  any    any     xxxxxxxxxx         anywhere            tcp dpt:ssh 
    0     0 ACCEPT     tcp  --  any    any     xxxxxxxxxx         anywhere            tcp dpt:ssh 
    0     0 ACCEPT     tcp  --  any    any     xxxxxxxxxx        anywhere            tcp dpt:ssh 
    0     0 ACCEPT     tcp  --  any    any     xxxxxxxxxxx        anywhere            tcp dpt:ssh

i checked /var/log/message and /var/log/syslog nothing is here related to iptables. then i create separate file for Iptables by adding this: kern.warning /var/log/iptables.log in my rsyslog.conf it does create iptables.log file inside /var/ but its still empty need some help to figure out how to fix this

Did you use the LOG option in your iptables rules?
http://www.linuxtopia.org/Linux_Fire...les/x4238.html

Kind regards

Originally Posted by repo Did you use the LOG option in your iptables rules? http://www.linuxtopia.org/Linux_Fire...les/x4238.html Kind regards

at first i had simple LOG without any option now i add --log-level warning
My rules looks like this:

-A INPUT -p tcp -m tcp --dport 22 -j LOG --log-level warning
-A INPUT -s xxxxxxx -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s xxxxxxx -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s xxxxxxx -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s xxxxxxx -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s xxxxxxx -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s xxxxxxx -p tcp -m tcp --dport 22 -j ACCEPT

and in my rsyslogd i have following line: kern=.warning -/var/log/iptables.log
Permissions is Ok . . . Log file is still empty . .. Any suggestions ?

still need help

BUMP