On 02/11/2018 04:32 PM, Thomas wrote:
> Done.
> shorewall.conf modified:
> cat /etc/shorewall/shorewall.conf | grep LOG
> LOG_LEVEL="info"
> BLACKLIST_LOG_LEVEL=
> INVALID_LOG_LEVEL=
> LOG_BACKEND=
> LOG_MARTIANS=Yes
> LOG_VERBOSITY=2
> LOGALLNEW=
> LOGFILE=/var/log/shorewall.log
> LOGFORMAT="Shorewall:%s %s "
> LOGTAGONLY=No
> LOGLIMIT="s:1/sec:10"
> MACLIST_LOG_LEVEL="$LOG_LEVEL"
> RELATED_LOG_LEVEL=
> RPFILTER_LOG_LEVEL="$LOG_LEVEL"
> SFILTER_LOG_LEVEL="$LOG_LEVEL"
> SMURF_LOG_LEVEL="$LOG_LEVEL"
> STARTUP_LOG=/var/log/shorewall-init.log
> TCP_FLAGS_LOG_LEVEL="$LOG_LEVEL"
> UNTRACKED_LOG_LEVEL=
> BLACKLIST_DEFAULT="Broadcast(DROP),Multicast(DROP),dropNotSyn:$LOG_LEVEL,dropInvalid:$LOG_LEVEL,DropDNSrep:$LOG_LEVEL"
> USE_NFLOG_SIZE=No
> 
> Still //var/log/shorewall.log/ is empty.

Did you reload Shorewall? Did any of your LOG rules get triggered (does
'shorewall show log' show any messages with timestamps after the reset
time at the top of the display)?

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to