Please give a simple sample about LOG in iptables!

yuzuohong · 06-09-2002, 05:34 AM

Hi all,

I tried lotsa times to use LOG function of IPTABLES in RedHat 7.2.
But I always failed.
Would you please give me some sample usage?
(I wanna make the log to my existing chain-- that's "-A POSTROUTING -s 10.0.0.0/255.255.255.0 -j MASQUERADE")
Thank you very much

fish

Noerr · 06-09-2002, 06:03 AM

iptables -A FORWARD -d 192.168.1.0/24 -s 1.2.3.4/32 -j LOG -log-prefix "IPTABLES forward:"

would log all packets that are forwarded from your local lan to ip address 1.2.3.4

regards

lamihai · 06-09-2002, 09:49 AM

Try Oskar Andreasson 's tutorial:
http://www.linuxsecurity.com/resourc...-tutorial.html

It's very helpfull and you will find help on loging,too

In your case:

iptables -A POSTROUTING -s 10.0.0.0/255.255.255.0 -j LOG -log-prefix "Text to read in log"
iptables -A POSTROUTING -s 10.0.0.0/255.255.255.0 -j MASQUERADE

So, first log,and after do what ever you want with those packets.

Noerr · 06-09-2002, 11:04 AM

also try www.linuxguruz.org/iptables