Displaying 20 results from an estimated 2000 matches similar to: "using ULOG"
2004 Jul 23
4
shorewall 2.0.3a, (ULOG) doesn''t log anything
Dear all:
Im using shorewall 2.0.3a (debian) w/ ULOG. shorewall starts ok, and the
firewall is running, but nothing is printed on the logs.
I try, for example, to do a connection to a port that is opened on the
server but closed by the FW and I get a connection refused. If I stop
the firewall, this port is accesible from the outside.
I think I''ve followed all the steps on
2008 Jan 10
5
Want to log all ISP traffic to ULOG
I want to use fprobe-ulog (http://fprobe.sourceforge.net/) to generate
NetFlow information about traffic going through my router. The question
is how to get the logging rules added to the appropriate chains (I''m
assuming eth2_in and eth2_out in my case)? I''m using the perl version
of shorewall 4.0.6.
--
Orion Poplawski
Technical Manager 303-415-9701
2004 Feb 17
12
Metalog and Shorewall
Hi Tom and list,
Still trying to set up Shorewall logging. I understand that Shorewall require syslog to get logging working, however I have metalog. Is this
possible to use metalog as logging facility for Shorewall? I was reading
http://www.shorewall.net/shorewall_logging.html and it describes other
method ( ULOG ). I understand that I have to compile ULOG support in the
kernel... where do I
2009 Aug 25
1
[PATCH] A default log level of ULOG is ignored by the shorewall-perl compiler (but not by shorewall-shell)
Hello,
I tried Shorewall for the first time today. I am currently using an up-to-date
installation of Debian Sid, which has shorewall 4.2.10, shorewall-shell 4.2.10
and shorewall-perl 4.2.10.1.
I noticed that even though I had the following /etc/shorewall/policy file,
iptables would still show LOG rules at the end of the INPUT and OUTPUT chains
instead of ULOG rules. (Other logging related rules
2002 Mar 17
2
ulog support in shorewall?
Hi,
I''ve just recently switched off my (lame) hardware firewall onto an
old box running linux 2.4.18, iptables 1.2.6 and shorewall 1.2.9. I''m
kinda new to linux firewalling myself but so far Shorewall has taken
much work from me.
While reading myself into iptables I saw that just recently something
called ULOG (userspace logging) has been implemented in newer kernels
and
2005 Jan 07
5
ULOG weirdness with 2.0.10
I''m noticing some weirdness in my ulog files with version 2.0.10. Here
is a portion of the log:
Jan 7 11:01:37 rancor Shorewall:loc2fw:AllowWOL: IN=eth1 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:0a:95:b2:11:4c:08:00 SRC=192.168.0.100
DST=192.168.0.255 LEN=97 TOS=00 PREC=0x00 TTL=64 ID=44155 CE PROTO=UDP
SPT=631 DPT=631 LEN=77
Jan 7 11:01:39 rancor Shorewall:loc2fw:AllowWOL: IN=eth1 OUT=
2014 Nov 07
7
[Bug 986] New: ulogd fails to build against linux headers >= 3.17.0 due to ULOG target removal
https://bugzilla.netfilter.org/show_bug.cgi?id=986
Bug ID: 986
Summary: ulogd fails to build against linux headers >= 3.17.0
due to ULOG target removal
Product: ulogd
Version: SVN (please provide timestamp)
Hardware: x86_64
OS: Gentoo
Status: NEW
Severity: major
Priority:
2004 Feb 01
4
Shorewall 2.0.0 Alpha2
http://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0
ftp://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0
See if this change to proxy arp is more palatable.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
2010 Jul 28
4
Re: Shorewall-users Digest, Vol 50, Issue 25
On 28/07/2010 15:45, shorewall-users-request@lists.sourceforge.net wrote:
> On 7/28/10 1:50 AM, Andrea Perdicchia wrote:
>
>> > Hi all,
>> > Is possible log mac address in shorewall?
>> > I try all configuration "debug,info..." in /etc/shorewall/shorewall.conf
>> > but in /var/log/messages the log show only few information and not mac
2011 Sep 13
1
[Bug 748] New: Range check for ulog-cprange is wrong
http://bugzilla.netfilter.org/show_bug.cgi?id=748
Summary: Range check for ulog-cprange is wrong
Product: iptables
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P5
Component: iptables
AssignedTo: netfilter-buglog at lists.netfilter.org
ReportedBy:
2005 May 08
4
not logging some ports?
Hello,
I want not to log some dropped packets going from net to fw, i.e. to
exclude some ports. For example, I get lots of denied SPT=4672 DPT=7476
packets in /var/log/messages. I know I can probably do this by using ulog
or some other logging system and writing some rules to exclude "SPT=4672",
but is it possible for shorewall not to log some ports? Sorry if it is obvious,
but I
2004 Dec 16
9
Some help for a beginner please: terser logging
Dear newfound friends,
please be patient. For me reading and writing in English is more painful
than dissecting IP traces :)
I have tried reading through the FAQ but could not quite understand:
I would like the logs to be terser. I think I can live without MAC, LEN,
TOS, PREC, TTL, ID fields normally (maybe need them only in special
situations). Could not understand if/how I can achieve this.
2004 Sep 02
2
Redirect to intranet webserver if not on maclist
First off, I want to say that everyone on this list is great. So heres
what I want to do..I have a maclist setup with all my users (roughly
400). There are constantly people leaving (deleting their accounts
which removes their MAC address) and registering for internet access ( I
have a php webserver that registers them, adds them to the maclist, and
allows them on the net). Is there a way to
2005 Sep 29
20
maclist problem on a firewall/bridge/router system with masquerading
Hy,
sorry for my poor english
i think i''m having a very unusual problem and very dificult to track,
but i''ll try to explain it as best as i can.
here is my scenario:
a firewall/bridge composed of 3 ethernet devices and 1 virtual one.
my bridge (br0 ) is composed of eth0, eth1 and tap0
br0:eth0 is my connection to my router (200.244.92.1)
br0:eth1 is my connection to my
2006 Dec 15
1
catching DNAT''ed packet
Hi.
I have a Server''s network with some servers in it, all with
192.168.1.0/25 ips. There is also a router in that network with ip
192.168.1.1. This router also connected to a client''s network
10.10.0.0/16 with ip 10.10.100.1.
All services on each server are given their virtual address from one of
two virtual networks 192.168.1.128/28 and 192.168.1.144/28.
192.168.1.128/28 is
2003 Dec 07
2
Re: [Shorewall-newbies] Re: Shorewall-newbies Digest; Problems with blacklist and nat !
Hello,
I have forwarded this to the shorewall-users list.
You will find better support for this obscure problem there.
Regards,
Alex Martin
http://www.rettc.com
Cristian Valentin Barean wrote:
> Hello !
> My name is Barean Cristian, and I have a network of 35 users, on a
> Linux Mandrake 9.2 server.
> As I was adding more users in my network, I found a problem with
2014 May 07
1
[Bug 921] New: log, ulog and nflog: command-line parameters are not supported
https://bugzilla.netfilter.org/show_bug.cgi?id=921
Summary: log, ulog and nflog: command-line parameters are not
supported
Product: nftables
Version: unspecified
Platform: x86_64
OS/Version: All
Status: NEW
Severity: normal
Priority: P5
Component: nft
AssignedTo: pablo at
2002 Dec 22
2
maclist option -> sorry good ver.
Setting up MAC Verification on eth0...
Error: Interface eth0 must be up before Shorewall can start
my :
/etc/shorewall/shorewall.conf:
MACLIST_DISPOSITION=REJECT
MACLIST_LOG_LEVEL=info
interfaces:
#ZONE INTERFACE BROADCAST OPTIONS
net ppp0 217.96.90.242 noping
loc eth0 255.255.255.0 routestopped,maclistmaclist:
maclist:
#INTERFACE MAC IP
2006 Apr 13
5
maclist or rule question
Hi,
I want to automate some of the maclist and rule functionality:
User connects to the network and gets a DHCP address from the shorewall box.
Using squid and redirection, all the user can do is go to a login page
on the firewall
User logs in correctly to the form on the webpage and a process captures
MAC and IP address info from the dhcpd.leases file
Once authenticated, a maclist entry and an
2002 Jan 31
0
[ANNOUNCE] problems with recent ULOG patch and old ulogd
--/aVve/J9H4Wl5yVO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hi Everybody!
I had to change the ulog.patch in recent patch-o-matic to use a different
netlink family (it's now 5 instead of 4).
This means, you will have to recompile your ulogd or any other application
in order to make it work.
That's also why I have