Skip to contentSkip to conversation

iptables -A INPUT -j LOG does not log anything

DISCUSSION Alexandre Rouillac 1 participant 2 messages Apr 1, 2006 – Apr 4, 2006

lore
Share & tools
lore
#0 lore raw

Hi all,

I set my iptables with policy "-P INPUT DROP" and my last line of INPUT chains to "-A INPUT -j LOG".

So everything packets not matching my INPUT rules will be LOG and DROP.

My problem is that iptables does not log anything to my syslog file.

I checked the syslogd configuration (debian default):

*.*;auth,authpriv.none -/var/log/syslog

kern.* -/var/log/kern.log

*.=info;*.=notice;*.=warn;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none          -/var/log/messages

I checked counters of INPUT chains :
20 3 144 LOG all -- * * 0.0.0.0/0
0.0.0.0/0 LOG flags 0 level 4

But nothing on my logfiles (syslog, messages, kern.log).

Does someone can help ?

Best Regards,
Alexandre

#1 lore raw

dmesg command give the DROPed packet.

Someone can help ?

Thanks for help.

Quoted 33 lines · Alexandre Rouillac

Hi all,

I set my iptables with policy "-P INPUT DROP" and my last line of INPUT chains to "-A INPUT -j LOG".

So everything packets not matching my INPUT rules will be LOG and DROP.

My problem is that iptables does not log anything to my syslog file.

I checked the syslogd configuration (debian default):

*.*;auth,authpriv.none -/var/log/syslog

kern.* -/var/log/kern.log

*.=info;*.=notice;*.=warn;\
        auth,authpriv.none;\
        cron,daemon.none;\
        mail,news.none          -/var/log/messages

I checked counters of INPUT chains :
20 3 144 LOG all -- * * 0.0.0.0/0
0.0.0.0/0 LOG flags 0 level 4

But nothing on my logfiles (syslog, messages, kern.log).

Does someone can help ?

Best Regards,
Alexandre