SuSE 9.0 firewall log file?

johnny1959 · 03-08-2004, 01:49 AM

Does anybody know if and where the SuSE firewall writes a log file to protocol intrusion attempts? (Like ZoneAlarm does in the M$-world?)

RolledOat · 03-08-2004, 10:56 PM

Like all linux distros, open a console
tail -f /var/log/messages
Example...
Mar 8 22:35:42 linux kernel: SuSE-FW-DROP-DEFAULT IN=ppp0 OUT= MAC= SRC=202.175.181.4 DST=64.238.136.187 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=31151 DF PROTO=TCP SPT=3360 DPT=3127 WINDOW=65340 RES=0x00 SYN URGP=0 OPT (020405AC01010402)

If you want a Firewall tool that lets you see hits, I recommend FireStarter (It is also the easist firewall tool I have ever seen). Better tool than the basic one that comes with Suse.

RO

johnny1959 · 03-09-2004, 01:56 AM

thanks RO!