OpenVZ Forum - RDF feed
type: channel
items: iptables LOG
items: Re: iptables LOG
items: Re: Re: iptables LOG

iptables LOG
type: item
description: Hello, I have loaded the necessary modules in CT0 (debian) and implemented a set of iptables rules in CT150 (Centos5.7). I added a LOG before the DROP rule in order to be informed of packet being dropped: the rule is being matched, but I can't find any log in /var/log/messages. I'm not sure wether the TCP stack is in CT150 or in CT0 (I would say in CT0, as it is kernel code), but I'm quite sure that iptables logs come from kernel. How can I get those logs directly in CT150? I tried the ULOG target instead of LOG, but I'm hitting the same problem. Would adding NET_ADMIN capability help? Thanks
creator: massimiliano.sciabica
date: 2012-03-19T09:59:05-00:00

Re: iptables LOG
type: item
description: Well, the problem was the template out of which I created my VPS. I don't know why, the line to start klogd in /etc/init.d/syslog was commented out. Started klogd, logs are happily showing in /var/log/messages
creator: massimiliano.sciabica
date: 2012-03-19T21:01:41-00:00

Re: iptables LOG
type: item
description: Well, the problem was the template out of which I created my VPS. I don't know why, the line to start klogd in /etc/init.d/syslog was commented out. Started klogd, logs are happily showing in /var/log/messages
creator: massimiliano.sciabica
date: 2012-03-19T21:08:45-00:00

Re: iptables LOG
type: item
description: Massimiliano <massimiliano.sciabica@kiiama.com> writes: > Well, the problem was the template out of which I created my VPS. > I don't know why, the line to start klogd in /etc/init.d/syslog was > commented out. > Started klogd, logs are happily showing in /var/log/messages Interesting, I always thought no logging is a "feature" of openvz ;) Now I see that klogd is also commented out in my template. Anyone care to shed some light as to why is this done?
creator: Aleksandar Ivanisevic
date: 2012-03-20T11:14:40-00:00

Re: Re: iptables LOG
type: item
description: Kernel logs are available for VPS since stable kernel release => 2.6.32. It looks like template creator took care to avoid launching a useless process. Just my opinion. On Tue, 20 Mar 2012 12:14:40 +0100, Aleksandar Ivanisevic wrote: > Massimiliano > <massimiliano.sciabica@kiiama.com> > writes: > >> Well, the problem was the template out of which I created my VPS. >> I don't know why, the line to start klogd in /etc/init.d/syslog was >> commented out. >> Started klogd, logs are happily showing in /var/log/messages > > Interesting, I always thought no logging is a "feature" of openvz ;) > > Now I see that klogd is also commented out in my template. > > Anyone care to shed some light as to why is this done? > >
creator: massimiliano.sciabica
date: 2012-03-20T11:41:36-00:00

Re: Re: iptables LOG
type: item
description: 20.03.2012 15:44 пользователь <massimiliano.sciabica@kiiama.com> написал: > > Kernel logs are available for VPS since stable kernel release => 2.6.32. > It looks like template creator took care to avoid launching a useless process. > Just my opinion. That's right. If you will see klogd commented out in latest templates — please file a bug > > > On Tue, 20 Mar 2012 12:14:40 +0100, Aleksandar Ivanisevic wrote: >> >> Massimiliano >> <massimiliano.sciabica@kiiama.com> >> writes: >> >>> Well, the problem was the template out of which I created my VPS. >>> I don't know why, the line to start klogd in /etc/init.d/syslog was >>> commented out. >>> Started klogd, logs are happily showing in /var/log/messages >> >> >> Interesting, I always thought no logging is a "feature" of openvz ;) >> >> Now I see that klogd is also commented out in my template. >> >> Anyone care to shed some light as to why is this done? >> >>
creator: kir
date: 2012-03-20T16:55:26-00:00

Re: Re: iptables LOG
type: item
description: Hello, The same happens in CentOS 5.8 CT0 and Debian 6.0 VZ. I have enabled klogd in VZ and logging works in VE right now. # uname -r 2.6.32-308.el5.028stab099.3 # ls /etc/rc* | grep klogd K03sysklogd K03sysklogd S16sysklogd S16sysklogd S16sysklogd S16sysklogd K03sysklogd # update-rc.d klogd defaults update-rc.d: using dependency based boot sequencing # ls /etc/rc* | grep klogd K01klogd K03sysklogd K01klogd K03sysklogd S16sysklogd S17klogd S16sysklogd S17klogd S16sysklogd S17klogd S16sysklogd S17klogd K01klogd K03sysklogd Thanks, Onur R. Bingol On 20.03.2012 18:55, Kir Kolyshkin wrote: > > > 20.03.2012 15:44 пользователь <massimiliano.sciabica@kiiama.com > <mailto:massimiliano.sciabica@kiiama.com>> написал: > > > > Kernel logs are available for VPS since stable kernel release => 2.6.32. > > It looks like template creator took care to avoid launching a > useless process. > > Just my opinion. > > That's right. > > If you will see klogd commented out in latest templates — please file > a bug > > > > > > > On Tue, 20 Mar 2012 12:14:40 +0100, Aleksandar Ivanisevic wrote: > >> > >> Massimiliano > >> <massimiliano.sciabica@kiiama.com > <mailto:massimiliano.sciabica@kiiama.com>> > >> writes: > >> > >>> Well, the problem was the template out of which I created my VPS. > >>> I don't know why, the line to start klogd in /etc/init.d/syslog was > >>> commented out. > >>> Started klogd, logs are happily showing in /var/log/messages > >> > >> > >> Interesting, I always thought no logging is a "feature" of openvz ;) > >> > >> Now I see that klogd is also commented out in my template. > >> > >> Anyone care to shed some light as to why is this done? > >> > >> > >> _______________________________________________ > >> Users mailing list > >> Users@openvz.org <mailto:Users@openvz.org> > >> https://openvz.org/mailman/listinfo/users > > > > > > _______________________________________________ > > Users mailing list > > Users@openvz.org <mailto:Users@openvz.org> > > https://openvz.org/mailm…
creator: cyrolancer
date: 2012-03-20T20:45:24-00:00