[lug] ipchains logs and nmap audit
gsexton at mhsoftware.com
Sat Jan 22 09:46:58 MST 2000
My guess that a preceding rule is doing jumping it to accept. Can you do an
ipchains -L input and list all of the rules?
MH Software, Inc.
Voice: 303 438 9585
Fax: 303 469 9679
From: lug-admin at lug.boulder.co.us [mailto:lug-admin at lug.boulder.co.us]On
Behalf Of Subba Rao
Sent: Saturday, January 22, 2000 5:51 AM
To: Denver Linux Users
Subject: [lug] ipchains logs and nmap audit
I have several ipchain rules. One of them is:
ipchains -A input -i ppp0 -p TCP --destination-port 21 -l -j DENY
Why are these ipchains not doing any logging? I do have the -l option
invoked for logging. The packet is supposed to be denied at the IP level
and then logged into syslog. When I try to connect from another address to
the IP address of the ppp0 interface, nothing gets logged. Instead, the
captures it into the log. tcplogd is an application level filter and not at
Why is this ipchains rule (and others) not getting logged?
The kernel is 2.2.14.
None of the connections to the services are getting logged by ipchains
I have used nmap on the ppp0 interface and yet it is not getting logged.
How are you auditing your services on the ppp0 interface? What options in
are you using to do the logging?
Thank you in advance.
subb3 at attglobal.net
=> Time is relative. Here is a new way to look at time. <=
Web Page: http://lug.boulder.co.us
Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
More information about the LUG