Configure Shorewall to Allow Syslog Messages from Router

dman777 · 01-29-2011, 08:57 PM

I have my system set up to where the router(dd-wrt) will send it's syslog messages to my Linux PC system. I am using shorewall as my firewall. I have two questions:

How can I configure shorewall to allow the messages from my router?

If I use my router IP address to allow the messages to come through the firewall, will this be a great security risk as anything from the internet can come through on that router ipaddress?

acid_kewpie · 01-30-2011, 02:44 PM

the IP address of the router would only be used internally for traffic for the router itself (assuming your firewall is behind your router, and you are using the ddwrt device for an ADSL connection. Firstly you'd only permit UDP traffic on port 514 for syslog, so it's not "everything", there would also be no port forwarding, so no way anyone from the outside would be able to get matching traffic into your network, and again as above, the IP of the router would only be used for the routers own traffic.