Displaying 1 result from an estimated 1 matches for "logstuff".
Did you mean:
dostuff
2006 Dec 30
1
Accumulating Physdev Counts
When using v2 we would modify the saved /var/lib/shorewall/restore file to
modify logging so we had separate counts by the physical device the
packets (actually, NEW connections, not total packet counts), such as:
-A LogStuff -j LOG etc
-A LogStuff -m physdev --physdev-in eth1 -j DROP
-A LogStuff -m physdev --physdev-in eth2 -j DROP
which gave us an idea where dropped traffic cam from (external internet or
local lan).
Is there an easy way of doing this within Shorewall such as the macro
facility or what?
Thank yo...