proxmox-mirrors/pve-docs
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-docs synced 2025-06-15 16:27:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

followup fíxes

Browse Source 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2019-03-19 14:46:40 +01:00
parent 7d47064e8a
commit 73b78e5efb
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pve-firewall.adoc
View File

@ -415,27 +415,22 @@ Logging of dropped packets is rate limited to 1 packet per second in order to
reduce output to the log file. reduce output to the log file.
Further, only some dropped or rejected packets are logged for the standard rules. Further, only some dropped or rejected packets are logged for the standard rules.
// TODO: describe standard/default rules and note which of them get logged
In order to log packets filtered by user-defined firewall rules, it is possible In order to log packets filtered by user-defined firewall rules, it is possible
to set a log-level parameter for each rule individually. to set a log-level parameter for each rule individually.
This allows to log in a fine grained manner and independent of the log-level This allows to log in a fine grained manner and independent of the log-level
defined for the standard rules. defined for the standard rules in the firewall `Options`.
In particular, each rule is logged independently from the log-level set for the
standard rules in the firewall `Options`.
The log level for the rule can also be set via the firewall configuration file by The log level for the rule can also be set via the firewall configuration file by
appending a `-log <loglevel>` to the selected rule. appending a `-log <loglevel>` to the selected rule.
Here, `<loglevel>` is one of the following flags, attached to the log output: Here, `<loglevel>` is one of the following flags:
`nolog, emerg, alert, crit, err, warning, notice, info, debug` `nolog, emerg, alert, crit, err, warning, notice, info, debug`
For example: For example, the following two are ident:
---- ----
IN REJECT -p icmp -log nolog IN REJECT -p icmp -log nolog
----
is the same as
----
IN REJECT -p icmp IN REJECT -p icmp
---- ----