Koozali.org: home of the SME Server

VPN (and incoming traffic) logging question

Offline woiks

  • *
  • 18
  • +0/-0
VPN (and incoming traffic) logging question
« on: December 06, 2005, 08:37:30 AM »
Hello All,

I am newbie to SME and Linux in general. I am running SME Server 6.0.1-01.

Having the need to monitor which users are connecting via VPN into office network, I digged into logs... Just to be sure that I have everything logged, I have applied 2 commands per
http://no.longer.valid/phpwiki/index.php/SecurityFAQ#firewall3

However, I still don't have a clue: where I can read VPN connection logs? There are bunch of logs but it seems none of them relate to incoming traffic ... 'messages' log is also empty.

Hope someone can point me in the right direction   :-?

Cheers
woiks
...

Landry

VPN (and incoming traffic) logging question
« Reply #1 on: December 07, 2005, 05:13:33 PM »
Try sme6admin, it has a module to track the history of VPN connections.

Check it at http://firewall-services.com/.

HTH, Landry

moodyp

VPN (and incoming traffic) logging question
« Reply #2 on: December 12, 2005, 08:31:37 PM »
It is curious that your messages log is empty, mine is full of kinds of stuff.

I check VPN access to my clients' systems using the log viewer in server-manager. If you view the messages file (assuming you have data there, of course) and filter on pppd, it will show you the VPN entries.

Checking who is accessing your system via VPN is good administrative housekeeping, but I think it would be easier for us newbies if there was a documented list of things we should be keeping a lookout for. Has anyone seen/wrote one?

Regards
Pete