Thread: Logging for IPTABLES not working?

hi folks,

need little bit of help. i've switched on iptables (dropping input connections default) on ubuntu install , having trouble trying identify why crashplan client wasnt working.

when tailed /var/log/messages file, i'm not seeing getting logged there.

politely ask guidance on working through why logging busted iptables? i'm guessing busted further down in ubuntu install

below how have logging setup on iptables:

thanks,

-boris

root@bridget:/var/www# iptables -l
chain input (policy accept)
target prot opt source destination
accept -- x.y.0.0/16 anywhere
accept -- w.x.y.z anywhere
accept tcp -- anywhere anywhere tcp dpt:ssh
accept tcp -- anywhere anywhere tcp dpt:www
accept tcp -- anywhere anywhere tcp dpt:https
log -- anywhere anywhere log level warning

chain forward (policy accept)
target prot opt source destination

chain output (policy accept)
target prot opt source destination

your input chain default policy accept, not drop text suggested be. set policy with:

code:

sudo iptables -p input drop

i suggest add unique prefix log statement, make easier find or extract information later on. example:

code:

sudo iptables -a input -j log --log-prefix "icatch:" --log-level warning

before going off , looking why couldn't find log entries, suggestion know there should have been entries. looking @ packet counters, know sure.

code:

sudo ipables -v -x -n -l

, yes, default entries should in /var/log/messages, in /var/log/kern.log , /var/log/syslog

Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [ubuntu] Logging for IPTABLES not working?

Ubuntu