Subject: RE: Further adventures in Firewall upgrades Date: Mon, 8 Apr 2002 16:36:22 -0500 Message-ID: <39CF78DBFE15E141A9FE7DE61AE74D1C162489@ctbs-hq1.hq.ctbs.net> From: "Brian Densmore" <DensmoreB@ctbsonline.com>
> ...so why not add code to iptables to log directly to a remote syslog
> server? I can't imagine it would take more than 200 lines of code,
> including command parsing, data structures, and syslog packet
> generation.
Not necessary to code. You can add iptables rules to log and the init
script for iptables
can tell it where to log. Still I can't imagine using this, unless you
never have
to worry about changes.