Page 1 of 1

Restriction Log

Posted: Sat Jan 05, 2019 4:53 pm
by iincitr
Hi all

Is there any way to log/see restriction behavior ?

Thank you

Re: Restriction Log

Posted: Sat Feb 02, 2019 6:26 am
by ispyisail
GUI or Command line?

Most things with a bit of work can be achieved via command line.

Re: Restriction Log

Posted: Sat Feb 02, 2019 8:07 am
by iincitr
Cli but how

Thank you

Re: Restriction Log

Posted: Sat Feb 02, 2019 1:47 pm
by ispyisail
Its possible that nobody knows.

I would have a look at logread

https://oldwiki.archive.openwrt.org/doc ... essentials

Re: Restriction Log

Posted: Sat Feb 02, 2019 6:47 pm
by Lantis
You would need to create LOG jump entries in iptables.
For example a restriction rule which blocked port 80 on a device might look like

*not a real command*
iptables -dst 192.168.1.100 -src * -dport 80 -j DROP

If we wanted to log that event, immediately before it we add the same rule but it jumps to LOG
iptables -dst 192.168.1.100 -src * -dport 80 -j LOG
iptables -dst 192.168.1.100 -src * -dport 80 -j DROP

That’s the basic premise. To implement this in Gargoyle would be a bit of a chore, but an adventuring user could do it.