Iptables and logging on a VPS? Possible?

state · March 16th, 2006, 11:18 PM

Hey folks,

I'm having some problems getting logging with iptables to work on my vps box and wondered if anyone has been successful in getting it to work. At this point I'm not sure if it's because it wasn't compiled into the kernel or it's a limitation of the VPS environment.

I've got a new chain setup called 'droplog'. The purpose (bet it's obvious!) is to first LOG then DROP any traffic from other rules with 'droplog' as the target.

I've created the chain, no problems there. I've added the rule to DROP with no problems. However, when I add the rule to log, it bombs out. The chain DOES exist:

Code:

Chain droplog (0 references)
target     prot opt source               destination         
DROP       all  --  anywhere             anywhere

but it doesn't seem to like the log directive:

Code:

root@vps [/var/log]# runas iptables -A droplog -j LOG
iptables: No chain/target/match by that name

The syntax is correct, and should work. I've tested it on several of my (personal) linux systems...Suggestions/comments greatly appreciated.

**fwwebs5** · March 17th, 2006, 6:49 AM

The firewall in the VPS control panel seems to cause problems with the use of IP tables even with the VPS firewall disabled. You might want to go to the Virtuozzo web site.

March 16th, 2006, 11:18 PM	#1 (permalink)
state Registered User Seasoned Poster Joined in Aug 2005 40 posts Gave thanks: 0 Thanked 0 times	Iptables and logging on a VPS? Possible? Hey folks, I'm having some problems getting logging with iptables to work on my vps box and wondered if anyone has been successful in getting it to work. At this point I'm not sure if it's because it wasn't compiled into the kernel or it's a limitation of the VPS environment. I've got a new chain setup called 'droplog'. The purpose (bet it's obvious!) is to first LOG then DROP any traffic from other rules with 'droplog' as the target. I've created the chain, no problems there. I've added the rule to DROP with no problems. However, when I add the rule to log, it bombs out. The chain DOES exist: Code: Chain droplog (0 references) target prot opt source destination DROP all -- anywhere anywhere but it doesn't seem to like the log directive: Code: root@vps [/var/log]# runas iptables -A droplog -j LOG iptables: No chain/target/match by that name The syntax is correct, and should work. I've tested it on several of my (personal) linux systems...Suggestions/comments greatly appreciated.

March 17th, 2006, 6:49 AM	#2 (permalink)
fwwebs5 Surpass Fan On a golden path... Joined in Nov 2003 432 posts Gave thanks: 0 Thanked 0 times	The firewall in the VPS control panel seems to cause problems with the use of IP tables even with the VPS firewall disabled. You might want to go to the Virtuozzo web site. __________________ Fw Web Solutions http://fwwebs.com

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)