callagga

Hi,

How can I view in real time firewall blocking activity? For example incoming attempts that are being blocked, or outgoing.

Some info:
* I'm using clarkconnect which is based on Centos I think.
* I don't seem to see anything in /var/log/messages to reflect any logging.
* iptables --version ==> iptables v1.3.5
* I looked in /etc/sysconfig/ but did not find any file called iptables


Thanks

vickey_20

you can use the 'tcpdump' commnad to see all activities. Also if iptables is installed then there must be a file called iptables in /etc/sysconfig/iptables as far as I know. I work on Red Hat but m not sure if this file can be placed in some other location.

__________________
Only if I could understand the man pages
Registered Linux user #492640
OS: RHEL4,5 ,RH 9,Ubuntu

callagga

thanks - actually worked it out on the clark connect forum as they do things a little different - they have a specific config file for iptables so I just had to change this

Lazydog

If you are looking to see dropped packests in real time you need to edit your rules to log the drops and then you can monitor the log file as follows
or what ever the log file is that your firewall is logging to.

__________________

Regards
Robert

Linux
The adventure of a life time.

Linux User #296285
Get Counted