extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-22 06:10:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

Document NFLOG

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8173 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-02-10 05:22:39 +00:00
parent dec8b5d308
commit 3cb90c9918
1 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
docs/shorewall_logging.xml
View File

@ -232,6 +232,39 @@ gateway:/etc/shorewall# </programl
<quote><command>show log</command></quote>,
<quote><command>logwatch</command></quote> and
<quote><command>dump</command></quote> commands.</para>
<para>Beginning in Shorewall-perl 4.1, the NFLOG target is supported.
</para>
<para>NFLOG is a successor to ULOG. In addition, both ULOG and NFLOG may
be followed by a list of up to three numbers in parentheses.</para>
<itemizedlist>
<listitem>
<para>The first number specifies the netlink group (1-32). If
omitted (e.g., NFLOG(,0,10)) then a value of 1 is assumed. </para>
</listitem>
<listitem>
<para>The second number specifies the maximum number of bytes to
copy. If omitted, 0 (no limit) is assumed. </para>
</listitem>
<listitem>
<para>The third number specifies the number of log messages that
should be buffered in the kernel before they are sent to user space.
The default is 1.</para>
</listitem>
</itemizedlist>
<para>Examples:</para>
<para><filename>/etc/shorewall/shorewall.conf</filename>:
<programlisting>MACLIST_LOG_LEVEL=NFLOG(1,0,1)</programlisting></para>
<para><filename>/etc/shorewall/rules</filename>:<programlisting>#ACTION SOURCE DEST PROTO DEST
# PORT(S)
ACCEPT:NFLOG(1,0,1) vpn fw tcp ssh,time,631,8080 </programlisting></para>
</section>
</section>