No Firewall Logging

Muggle · 07-01-2009, 09:51 PM

Guys,

All other appliances are reporting fine, I am not, however, getting any logging from the firewall. I have many blocked events, but both ALL and BLOCKED logs are empty.

Any thoughts would be helpful.

mdh · 07-01-2009, 10:42 PM

If you're using default open/closed rules, that's why. Specific rules get logs from activity, not the defaults.

girbot · 07-02-2009, 08:09 AM

I have a block all rule at the bottom of my firewall rules and this logs everything. I beleive most other UT users have employed something similiar to this.

Muggle · 07-02-2009, 09:12 AM

That's it then MDH, so far I've left the rules on the FW alone...I've only had it running for about two months. I've been tweaking all the apps starting at the top, now I'm down to the FW and will be changing some things in there soon, that's why I just noticed no logging.

Thanks.

mdh · 07-02-2009, 12:10 PM

Good! Use a block rule (block ALL as girbot mentioned, or something that suits your needs specifically) and you should see logging that gives you a good rundown on attempted intrusions.

07-01-2009, 09:51 PM	#1 (permalink)
Muggle Untangler Join Date: Jun 2009 Location: Lakewood, CA Posts: 67	No Firewall Logging Guys, All other appliances are reporting fine, I am not, however, getting any logging from the firewall. I have many blocked events, but both ALL and BLOCKED logs are empty. Any thoughts would be helpful.

07-01-2009, 10:42 PM	#2 (permalink)
mdh Join Date: Aug 2007 URLs submitted: 171 Posts: 4,802	If you're using default open/closed rules, that's why. Specific rules get logs from activity, not the defaults. __________________ This space reserved for profound thought.....which does happen on occasion."

07-02-2009, 12:10 PM	#5 (permalink)
mdh Join Date: Aug 2007 URLs submitted: 171 Posts: 4,802	Good! Use a block rule (block ALL as girbot mentioned, or something that suits your needs specifically) and you should see logging that gives you a good rundown on attempted intrusions. __________________ This space reserved for profound thought.....which does happen on occasion."

07-02-2009, 08:09 AM	#3 (permalink)
girbot Master Untangler Join Date: Sep 2008 URLs submitted: 1 Posts: 105	I have a block all rule at the bottom of my firewall rules and this logs everything. I beleive most other UT users have employed something similiar to this.

07-02-2009, 09:12 AM	#4 (permalink)
Muggle Untangler Join Date: Jun 2009 Location: Lakewood, CA Posts: 67	That's it then MDH, so far I've left the rules on the FW alone...I've only had it running for about two months. I've been tweaking all the apps starting at the top, now I'm down to the FW and will be changing some things in there soon, that's why I just noticed no logging. Thanks.