[SOLVED] PVEFW Logs with custom rules

[Mecanik]

Hi,

I'm not sure if I asked the question already, checked but cannot find in my posts. Basically I have some custom iptables rules per VM/adapter and I do logging.

These logs go into the main node logs instead of the VM Firewall logs.

/sbin/iptables -N ...
/sbin/iptables -A ... -m limit --limit 1/sec -j NFLOG --nflog-prefix  ':myprefix:...: '
/sbin/iptables -A ... -j DROP
/sbin/iptables -A ... -m comment --comment 'Log...'

Any way I can put the logs in the right place? Please advise.

Thanks

 

[Mecanik]

Anyone?

 

[Mecanik]

Bump - nobody have any clue about this?

 

[Mecanik]

Well, considering nobody gave a crap to even try and reply... I will leave my answer here.

Looking at https://github.com/proxmox/pve-firewall/blob/master/src/pvefw-logger.c and following the log format will indeed put your custom logs into the VM firewall log.