Re: [TCLUG:12743] ipchains logs and nmap audit

[Nate Carlson <natecars@infiniteloop.com>]

On Sat, 22 Jan 2000, Subba Rao wrote:

> 
> I have several ipchain rules. One of them is:
> 
> ipchains -A input -i ppp0 -p TCP --destination-port 21 -l -j DENY
> 
> Why are these ipchains not doing any logging?  I do have the -l option
> invoked for logging. The packet is supposed to be denied at the IP level
> and then logged into syslog. When I try to connect from another address to
> the IP address of the ppp0 interface, nothing gets logged. Instead, the tcplogd daemon
> captures it into the log. tcplogd is an application level filter and not at IP level.
> Why is this ipchains rule (and others) not getting logged?
> 

try:

ipchains -A input -i ppp0 -s 0/0 -d 0/0 21 -p tcp -j DENY -l

..and see if it works.

---
nate carlson
the infinite loop
natecars@infiniteloop.com