Thomas Graf 43f393caec
netfilter: audit target to record accepted/dropped packets ...
This patch adds a new netfilter target which creates audit records
for packets traversing a certain chain.
It can be used to record packets which are rejected administraively
as follows:
-N AUDIT_DROP
-A AUDIT_DROP -j AUDIT --type DROP
-A AUDIT_DROP -j DROP
a rule which would typically drop or reject a packet would then
invoke the new chain to record packets before dropping them.
-j AUDIT_DROP
The module is protocol independant and works for iptables, ip6tables
and ebtables.
The following information is logged:
- netfilter hook
- packet length
- incomming/outgoing interface
- MAC src/dst/proto for ethernet packets
- src/dst/protocol address for IPv4/IPv6
- src/dst port for TCP/UDP/UDPLITE
- icmp type/code
Cc: Patrick McHardy <kaber@trash.net >
Cc: Eric Paris <eparis@parisplace.org >
Cc: Al Viro <viro@ZenIV.linux.org.uk >
Signed-off-by: Thomas Graf <tgraf@redhat.com >
Signed-off-by: Patrick McHardy <kaber@trash.net >
2011-01-16 18:10:28 +01:00
2011-01-06 22:32:52 +00:00
2010-12-17 09:54:40 -08:00
2010-12-16 10:05:06 -08:00
2011-01-07 14:45:47 -08:00
2010-11-15 20:44:26 -05:00
2011-01-06 18:32:12 -08:00
2010-12-21 00:40:51 +09:00
2011-01-16 18:10:28 +01:00
2011-01-13 12:05:12 +01:00
2011-01-07 17:08:46 -08:00
2010-12-26 22:37:05 -08:00
2010-12-22 19:43:34 -08:00
2011-01-07 13:16:28 -08:00
2010-12-11 01:28:58 -05:00
2010-12-10 15:45:05 -08:00
2010-11-12 07:55:30 -08:00
2011-01-16 18:10:28 +01:00
2010-12-06 15:58:43 -05:00
2010-11-30 17:56:38 -08:00
2011-01-07 17:50:31 +11:00
2010-11-15 13:27:04 -05:00
2010-12-17 08:36:01 +01:00
2010-12-13 16:11:13 -08:00
2010-11-26 10:51:04 +00:00
2010-12-20 09:07:35 -08:00
2011-01-07 17:50:29 +11:00
2011-01-05 14:15:50 +01:00
2010-12-16 16:15:34 -08:00
2010-11-10 16:57:11 -08:00
2010-11-30 13:39:55 +00:00
2011-01-07 17:50:32 +11:00
2010-12-31 10:50:54 -08:00
2010-12-07 13:47:12 +01:00
2011-01-03 01:41:40 -08:00
2010-11-26 09:57:36 +01:00
2010-12-17 15:07:19 +01:00
2010-12-10 15:55:23 -08:00
2010-12-15 13:56:33 -05:00
2010-12-22 12:56:10 +09:00
2010-12-08 10:30:34 -08:00
2011-01-07 17:50:27 +11:00
2011-01-07 17:50:31 +11:00
2010-11-15 13:49:51 +09:00
2011-01-07 17:50:23 +11:00
2011-01-07 17:50:23 +11:00
2010-11-19 10:18:47 -05:00
2011-01-07 17:50:29 +11:00
2010-12-06 23:52:08 +01:00
2010-12-06 17:15:15 -08:00
2010-11-18 10:56:29 -08:00
2010-12-17 15:18:04 +01:00
2010-12-10 11:54:35 -08:00
2010-11-12 14:51:55 +01:00
2010-11-15 22:40:38 +01:00
2010-11-15 22:40:38 +01:00
2010-12-20 14:49:47 -05:00
2010-11-15 11:13:16 -08:00
2011-01-06 11:10:05 -08:00
2010-11-22 08:24:29 -08:00
2010-11-16 10:58:30 -08:00
2010-11-12 12:30:57 -08:00
2011-01-04 11:29:52 -08:00
2010-12-06 12:59:05 -08:00
2011-01-06 10:23:33 -08:00
2011-01-07 14:45:47 -08:00
2010-11-11 13:40:11 +01:00
2010-12-17 10:01:09 -08:00
2010-11-25 10:42:59 +09:00
2010-11-24 11:16:42 -08:00
2010-12-09 20:17:07 -08:00
2010-12-29 08:17:11 -02:00
2010-12-17 15:07:19 +01:00
2010-11-15 13:37:37 -08:00
2011-01-07 17:02:58 -08:00
2010-12-22 10:27:53 +01:00
2010-11-12 07:55:32 -08:00
2010-11-12 07:55:32 -08:00
2010-11-12 07:55:32 -08:00
2010-11-16 13:33:23 -08:00
2011-01-07 17:50:31 +11:00
2010-11-22 08:34:23 -08:00
2010-12-06 11:03:46 -08:00
2010-12-02 14:51:15 -08:00
2010-12-23 09:48:41 +01:00
2011-01-07 17:50:33 +11:00
2010-11-26 15:05:34 +01:00
2011-01-07 17:50:27 +11:00
2011-01-07 17:50:19 +11:00
2011-01-07 17:50:26 +11:00
2011-01-03 12:06:21 -08:00
2011-01-13 10:29:21 +09:00
2010-12-17 12:03:14 -08:00
2011-01-07 17:50:29 +11:00
2010-12-07 23:02:44 -05:00
2010-11-22 13:24:48 -05:00
2010-12-20 14:49:47 -05:00
2010-12-22 22:15:32 +01:00
2010-11-10 16:57:11 -08:00
2010-11-25 06:50:40 +09:00
2011-01-07 17:50:33 +11:00
2010-11-29 14:36:33 -08:00
2010-12-18 15:54:04 +01:00
2010-12-16 11:36:43 +01:00
2010-11-28 16:27:19 -08:00
2010-12-16 17:12:25 +01:00
2011-01-07 17:50:29 +11:00
2010-11-15 13:37:37 -08:00
2010-11-12 07:55:33 -08:00
2010-12-02 17:55:12 +01:00
2010-11-12 07:55:32 -08:00
2011-01-07 17:50:31 +11:00
2010-12-17 12:34:59 -08:00
2010-12-17 12:34:08 -08:00
2010-11-29 22:01:58 -08:00
2010-11-29 22:01:58 -08:00
2010-11-17 08:59:32 -08:00
2011-01-07 17:50:29 +11:00
2010-11-12 07:55:30 -08:00
2010-11-15 13:24:06 -05:00
2010-11-15 11:29:30 -08:00
2011-01-07 15:54:34 +01:00
2011-01-07 08:56:33 -08:00
2011-01-07 17:50:27 +11:00
2010-12-16 13:14:32 -08:00
2010-11-30 14:11:49 -08:00
2010-11-15 18:48:25 +09:00
2011-01-13 10:29:21 +09:00
2011-01-07 17:50:16 +11:00
2010-11-17 14:58:36 -08:00
2010-12-08 12:16:33 -08:00
2011-01-06 11:41:42 -08:00
2010-11-18 14:37:34 +01:00
2010-11-24 11:14:24 -08:00
2010-11-18 14:37:45 +01:00
2010-12-22 19:43:34 -08:00
2010-12-11 12:34:34 +01:00
2011-01-01 13:57:56 -08:00
2011-01-01 13:57:56 -08:00
2010-12-03 10:45:34 -05:00
2010-12-16 13:14:32 -08:00
2010-12-02 12:58:16 -08:00
2010-12-20 09:37:33 +01:00
2010-11-10 16:57:11 -08:00
2010-12-16 10:05:06 -08:00
2010-12-11 02:01:35 -05:00
2010-12-02 14:51:15 -08:00
2010-11-15 13:25:02 -05:00
2011-01-07 16:58:04 -08:00
2010-12-10 14:43:58 -08:00
43f393caec