Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: rene on February 02, 2003, 05:43:19 PM

Title: how do I make ipchains log rejected packets?
Post by: rene on February 02, 2003, 05:43:19 PM

Hello,

I am currently testing around with SME 5.5 U3 and PSAD, a package to detect and handle portscan and other stuff. It seems that this package is
depending on syslog messages which are normally created by ipchains
when a packet ir rejected. I have not found SME doing this yet and want
to enable this "flag" on the masq service.
Does anyone know how to do that ?

Thanks for any idea, René

Title: Re: how do I make ipchains log rejected packets?
Post by: Charlie Brady on February 02, 2003, 06:29:44 PM

rene wrote:

>  It
> seems that this package is
> depending on syslog messages which are normally created by
> ipchains
> when a packet ir rejected. I have not found SME doing this
> yet and want
> to enable this "flag" on the masq service.

The FAQ is a good place to stat:

http://www.e-smith.org/faq.php3#6q10

Charlie

Title: Re: how do I make ipchains log rejected packets?
Post by: rene on February 02, 2003, 07:15:51 PM

Hello Charlie...

@!#$ @!#$ @!#$ I KNEW this would be somewhere but I looked and looked but couldnt find it.... but yeah I forgot to check the FAQ...
So after one and a half year of using e-smith, I behaved like a
newbie lol........

thanks for the hint :-D CU, René