Quantcast
Channel: GoLinuxHub
Viewing all articles
Browse latest Browse all 392

How to log iptables messages in a different log file

$
0
0
Generally all the info to error level messages are logged inside /var/log/messages but it makes hard to differentiate between long list of logs inside messages.

To separate the iptables related logs in different file follow the following procedure
NOTE: For RHEL 6 file name will be rsyslog.conf

To log all the iptables related messages
# vi /etc/syslog.conf
# Log all kernel messages to firewall.log.     
kern.*                                                          /var/log/frewall.log
# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
# Don't log kernel related any messages
*.info;mail.none;authpriv.none;cron.none;kern.none                /var/log/messages

To log only warning level iptables messages
# Log all kernel messages to firewall.log.
kern.warn                                                 /var/log/frewall-warn.log

To log all the messages for info level to error level
kern.info;kern.!crit          /var/log/firewall.log
To log the messages as per their severity level in different files
kern.*                       /var/log/iptables.log
kern.crit                    /var/log/iptables-crit.log
kern.info                    /var/log/iptables-info.log

For more information on severity levels of syslog follow the below link
SYSLOG Tutorial

Once done restart the syslog services
For RHEL 6
# service rsyslog restart
For RHEL 5 or older
# service syslog restart
Please let me know your success and failures

Viewing all articles
Browse latest Browse all 392

Latest Images

Trending Articles



Latest Images