OpenVZ Forum


Home » General » Support » Iptables logging on VPS not working
Re: Iptables logging on VPS not working [message #1883 is a reply to message #1847] Fri, 03 March 2006 11:06 Go to previous messageGo to previous message
Martijn is currently offline  Martijn
Messages: 9
Registered: December 2005
Location: The Netherlands
Junior Member
dev wrote on Tue, 28 February 2006 17:33

Where have you tried to see logged packets? in host system or in VPS?
Have you tried 'dmesg' in VPS?

Dev, sorry that it took a while but here we go:
- Looked in both files (messages/dmesg) on the host and VPS, nothing in regard to blocked packets for the VPS;
- The host blocks and logs the dropped packages fine but only uses the INPUT table (for access to the host). No FORWARD rules are applied on the host.

There must be something I overlook, the rules are there and the counters increase after an attempt which triggers the logging and the reject as seen below:
$vps> iptables -L -n -v
Chain RH-Firewall-1-INPUT (2 references)
 pkts bytes target prot opt in out source    destination
    0     0 ACCEPT all  --  lo *   0.0.0.0/0 0.0.0.0/0
    0     0 ACCEPT icmp --  *  *   0.0.0.0/0 0.0.0.0/0 icmp type 255
...
   82 11917 ACCEPT tcp  --  *  *   0.0.0.0/0 0.0.0.0/0 tcp dpt:80
   14  1188 LOG    all  --  *  *   0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `INPUT-DENIED: '
   14  1188 REJECT all  --  *  *   0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Bottom line is that the rules *DO WORK* but nothing is logged when packets are dropped of rejected.

Strange... any help is appreciated!
 
Read Message icon9.gif
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message icon14.gif
Read Message
Read Message
Read Message
Previous Topic: DAHDI doesn't compile with OVZ Kernel
Next Topic: Kernel 2.6.32-5-openvz-amd64 & CPULIMIT
Goto Forum:
  


Current Time: Sat Sep 14 05:23:31 GMT 2024

Total time taken to generate the page: 0.04423 seconds