Forum Debian Users Gang

# # PLIKI LOGOW FIREWALLA # #

destination df_http { file("/var/log/firewall/iptables_http.log"); };
destination df_ftp { file("/var/log/firewall/iptables_ftp.log"); };
destination df_smtp { file("/var/log/firewall/iptables_smtp.log"); };
destination df_ssh { file("/var/log/firewall/iptables_ssh.log"); };
destination df_reszta { file("/var/log/firewall/iptables_reszta.log"); };

filter f_debug_ipt { level(debug); };

# # FILTRY DLA POSZCZEGOLNYCH RODZAJOW RUCHU (dla logow z iptables) # #
filter f_http { match("regexp"  value('\^IPT\.http\.\[')); };
filter f_ftp { match("regexp"    value('\^IPT\.ftp\.\[')); };
filter f_smtp { match("regexp"  value('\^IPT\.smtp\.\[')); };
filter f_ssh { match("regexp"   value('\^IPT\.ssh\.\[')); };
filter f_reszta { match("regexp"        value('\^IPT\.polaczenia\.\[')); };

filter f_nie_firewall { not match("regexp"      value('\^IPT\.')); };

# # LOGI Z FIREWALLA # #

# http
log {
    source(s_src);
    filter(f_debug_ipt);
    filter(f_http);
    destination(df_http);
    };

# ftp
    log {
    source(s_src);
    filter(f_debug_ipt);
    filter(f_ftp);
    destination(df_ftp);
    };

# smtp
    log {
    source(s_src);
    filter(f_debug_ipt);
    filter(f_smtp);
    destination(df_smtp);
    };

# ssh
    log {
    source(s_src);
    filter(f_debug_ipt);
    filter(f_ssh);
    destination(df_ssh);
    };

# reszta
    log {
    source(s_src);
    filter(f_debug_ipt);
    filter(f_reszta);
    destination(df_reszta);
    };