how can I see firewall logging? (using iptables in ClarkConnect / Centos)

[callagga]

Hi,

How can I view in real time firewall blocking activity? For example incoming attempts that are being blocked, or outgoing.

Some info:
* I'm using clarkconnect which is based on Centos I think.
* I don't seem to see anything in /var/log/messages to reflect any logging.
* iptables --version ==> iptables v1.3.5
* I looked in /etc/sysconfig/ but did not find any file called iptables


Thanks

[vickey_20]

you can use the 'tcpdump' commnad to see all activities. Also if iptables is installed then there must be a file called iptables in /etc/sysconfig/iptables as far as I know. I work on Red Hat but m not sure if this file can be placed in some other location.

[callagga]

thanks - actually worked it out on the clark connect forum as they do things a little different - they have a specific config file for iptables so I just had to change this

[Lazydog]

If you are looking to see dropped packests in real time you need to edit your rules to log the drops and then you can monitor the log file as follows

tail-F /var/log/messages

or what ever the log file is that your firewall is logging to.