Hello friends.
I am attempting to use the iptables log target in the VE.
[root@arsenic ~]# lsmod | grep -i log
ipt_LOG 7712 56
ip_tables 23472 16 ipt_recent,ipt_REDIRECT,iptable_nat,ipt_state,ipt_length,ipt_ttl,ipt_tcpmss,ipt_TCPMSS,iptable_mangle,iptable_filter,ipt_multiport,ipt_limit,ipt_LOG,ipt_TOS,ipt_tos,ipt_REJECT
[root@arsenic ~]#
[root@arsenic ~]# vzctl enter 9890933
entered into VE 9890933
[root@dark /]#
[root@dark /]# grep LOG /proc/net/ip_tables_targets
LOG
When I create a simple logging rule such as: '-A INPUT -p tcp --dport 22 -j LOG', no messages seem to be hitting syslog. I tested this with a Centos4 VE.
Am I missing something here or is the log target unsupported in the VE context? If so, I will create a bugzilla report.
Thank you
Rick
OpenVZ Forum
Members
Search
Help
Register
Login
Home
