Re: LOGMARK example pretty-please?

Tom Eastep
Tue, 19 Jul 2011 13:53:24 -0000

On Tue, 2011-07-19 at 06:34 -0700, Tom Eastep wrote:
> On Tue, 2011-07-19 at 06:09 -0700, Tom Eastep wrote:
> > LOGMARK is simply a log level, just like ''info'' or
''NFLOG''. You use it
> > any place that a log level may be used. If you simply want to log a
> > packet
> >
> > LOG:LOGMARK <dest zone> ...
> >
> > in the rules file.
>
> Hmmm -- it seems that the LOGMARK target is broken.
>
> I''ll work on a fix.

A patch is attached.

To apply:

	a) Save the attachment (LOGMARK.patch)
	b) cd /usr/share/shorewall/Shorewall/ (assuming that''s where your
           distribution installs the Shorewall Perl modules)
        c) patch < path/to/LOGMARK.patch

The patch applies (with offsets) back to at least Shorewall 4.4.11.

The syntax for invoking LOGMARK is:

	LOGMARK(<priority>)

where <priority> is a syslog priority (values 0-7, or debug, info,
notice, etc.).

Example rule:

	LOG:LOGMARK(info)   lan		dmz	udp	1234