Re: UFW logging

Saurabh Bathe <[email protected]> Thu, 22 Dec 2011 21:28:07 +0530
Newsgroups gmane.linux.admin
Message-ID <[email protected]>
On Tuesday 20 December 2011 07:33 PM, Dermot Paikkos wrote:
> Chain ufw-user-limit (0 references)
>      pkts      bytes target     prot opt in     out     source
>       destination
>         0        0 LOG        all  --  *      *       0.0.0.0/0
>     0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 0 level 4
> prefix `[UFW LIMIT BLOCK] '

I would say the rule above *could* be suspect, which would log anything 
that it catches. Depending on where in the filter it is being 
referenced, it maybe catching those packets. I cannot say definitively 
without actually seeing whole iptables -nL output.

Thanks,
Saurabh
--
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html