pve-firewall no logs even on level debug

Discussion in 'Proxmox VE: Networking and Firewall' started by tim taler, Feb 7, 2019.

  1. tim taler

    tim taler New Member

    Joined:
    Mar 8, 2018
    Messages:
    17
    Likes Received:
    0
    Hi,
    what's wrong with firewall logging?

    the pve firewall in my cluster seems to work fine except it shows no logs?

    I set
    "/etc/pve/nodes/<nodenmae>/host.fw"

    to:
    ---snipp---
    [OPTIONS]

    tcpflags: 1
    smurf_log_level: info
    tcp_flags_log_level: info
    log_level_in: debug
    log_level_out: debug
    ---snapp---

    but if I try to access the server through a banned device there are no log entries in
    /var/log/pve-firewall.log
    just:

    ---snipp---
    ...
    0 5 - 07/Feb/2019:11:56:33 +0100 starting pvefw logger
    0 5 - 07/Feb/2019:11:56:37 +0100 received terminate request (signal)
    0 5 - 07/Feb/2019:11:56:37 +0100 stopping pvefw logger
    0 5 - 07/Feb/2019:11:56:38 +0100 starting pvefw logger
    0 5 - 07/Feb/2019:12:08:39 +0100 received terminate request (signal)
    0 5 - 07/Feb/2019:12:08:39 +0100 stopping pvefw logger
    0 5 - 07/Feb/2019:12:11:04 +0100 starting pvefw logger
    0 5 - 07/Feb/2019:12:11:09 +0100 received terminate request (signal)
    0 5 - 07/Feb/2019:12:11:09 +0100 stopping pvefw logger
    0 5 - 07/Feb/2019:12:11:09 +0100 starting pvefw logger
    ...
    ---snapp---

    does there have to be some logging rules in
    /etc/pve/firewall/cluster.fw?
    (becuase there I didn't mention logging anywhere)
    TIA
     
  2. spirit

    spirit Well-Known Member

    Joined:
    Apr 2, 2010
    Messages:
    3,360
    Likes Received:
    138
    currently, the logs is only for the final default reject or drop. (not accept, and not for rules).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice