uname -a
Linux host 2.6.32-279.9.1.el6.i686 #1 SMP Tue Sep 25 20:26:47 UTC 2012 i686 i686 i386 GNU/Linux
初创企业:
ls /etc/init.d/
abrt-ccpp certmonger dovecot irqbalance matahari-broker mdmonitor nfs proftpd rpcbind single ypbind
abrtd cgconfig functions kdump matahari-host messagebus nfslock psacct rpcgssd smartd
abrt-oops cgred haldaemon killall matahari-network mysqld ntpd qpidd rpcidmapd sshd
acpid cpuspeed halt ktune matahari-rpc named ntpdate quota_nld rpcsvcgssd sssd
atd crond httpd lfd ma
tahari-service netconsole oddjobd rdisc rsyslog sysstat
auditd csf ip6tables lvm2-lvmetad matahari-sysconfig netfs portreserve restorecond sandbox tuned
autofs cups iptables lvm2-monitor matahari-sysconfig-console network postfix rngd saslauthd udev-post
但是当我安装 CSF/LFD 时,我什么也没得到。LFD 不会创建 lfd.log,防火墙也不会在 /var/log/messages 中记录任何阻止。这不正常。
我查找了 klogd 但也许我找错了地方,无法查看它是否已启用?
ls /etc/init.d/syslog
ls: cannot access /etc/init.d/syslog: No such file or directory
还注意到没有系统日志?
还注意到了这一点:
csf -d 84.113.21.201
Adding 84.113.21.201 to csf.deny and iptables DROP...
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
我以前从未见过这个,这是一个专用的盒子。
还:
./csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing xt_connlimit...OK
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...OK
Testing iptable_nat/ipt_DNAT...OK
RESULT: csf should function on this server
iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
答案1
您可以/etc/init.d/rsyslog
查看/etc/rsyslog.conf
哪些过滤器可能适用以及哪些目标日志文件用于内核消息。