Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Mark on May 29, 2003, 11:48:33 AM

Title: Dorbalo
Post by: Mark on May 29, 2003, 11:48:33 AM

Hi, im just wondering is their anyway to display what ips/packets that e-smith's firewall has blocked or stopped from acessing the local network

thanks
Mark

Title: Re: Dorbalo
Post by: Cyrus Bharda on May 30, 2003, 02:43:25 AM

Mark,

You will have to enable logging and then the denyed packets will be shown in /var/log/messages

To enable logging: (from FAQ)

How can I log/view all denied packets filtered by the firewall component of my SME Server?
By default, logging of denied packets is turned off. There are three levels of denied packet logging:


all - every blocked packet is logged
most - all blocked packets except SMB and RIP
none - (default) no blocked packets are logged
To change the level of logging:

    /sbin/e-smith/db configuration setprop masq Logging most
    /sbin/e-smith/signal-event remoteaccess-update

Denied packets will now be logged to the system log. (/var/log/messages)
Conversely, to turn logging off:

    /sbin/e-smith/db configuration setprop masq Logging none  
    /sbin/e-smith/signal-event remoteaccess-update

Enjoy!

Cyrus Bharda