Tuesday, October 7, 2008

Log everything with shorewall

If you're using shorewall as your firewall, then this tip might be useful to you.
Sometimes, your firewall blocks some access and you do not know what happens.
To know exactly what's going on on your network, just add these lines to your /etc/shorewall/rules files:

LOG:2 net net all
LOG:2 fw net all
LOG:2 net fw all
LOG:2 fw fw all


Then, with
tail -f /var/log/messages

you will see the detailed log and will be able to fix the /etc/shorewall/rules file accordingly.

No comments: