Hi. I'm currently running Mandrake 9.2 in my home network and the linksys router (192.168.1.1) sends the logs to the linux box (192.168.1.102), using the program called linksysmon (yes I'm a newbie).

this is working fine, but then I wanted to secure the linux box so I installed guarddog, so I could easily configure what kind of traffic can access the linux box. That also went fine and the linux box can talk to the Windows xp box that I have in the home network with no prloblem, but now the linksys router cannot send the logs to the linux box (confirmed by messages in the syslog). If I disable the confiiguraiton changes done by guarddog then it works so I know (I think) it has to do something with the ip tables.

Can somebody lend a hand so that I can fix this.

Thanks in advance

SOLUTION FOUND

I missed trippin' the rift yesterdya but I found the solution to this problem. I payed more attention to the DROPPED entires in the syslog and found that upd port 162 was being dropped every eveyrtime there was traffic coming or going through the linksys router.

So I thought "this could be it, but I better be sure". Then I went to the /etc/services file and check it out and por 162 corresponds to the snmp trap service. I then went on and open that port in guarddog and the log was starting to be collected again.

I hope that this helps somebody else.