ulogd not logging anything!

ripp · n00b Joined: 17 Feb 2003 Posts: 24

Hi folks, having some trouble with ulogd.

In short, its not logging anything whatsoever! /var/log/ulogd.syslogemu is
*Zero* bytes. I know the packet filtering is working, I've tested that.

I've re-emerged ulogd and iptables to see if it would cure it, but still nothing. Running stock kernel 2.6.5. ULOG (as well as all the other iptables goodness) is in the kernel, not modularized. iptables is set up with '-j ULOG' instead of '-j LOG'.

Anyone know what could be up?

b0fh · Guru Joined: 16 Jun 2003 Posts: 426

I'm having a similar problem with ulogd, mysql and ulog-php interface. Ulogd writes something into its mysql-database, but the ulog-php "gui" seems to not recognize the entries there - it shows nothing.
I was using ulodg a while ago (with 2.4 one), and now reinstalled it under a 2.6... might be a reason...

ripp · n00b Joined: 17 Feb 2003 Posts: 24

[SOLVED]

I'm an idiot!!! :roll:

I figured out what happened here.

I used fwbuilder to put together the iptables rules for this firewall, and one of the default options is to *not* include the INPUT and OUTPUT chains (only the FORWARD) in the 'catch all' DENY rule.

Since this is only for one machine, packets weren't hitting the input/output logging rule, and therefore not being logged.

So, if you use fwbuilder to put together rules for a single machine, be sure to 'assume that the object is part of the 'any' object!' like the option says!!!