Proxmox/pve-docs
5
0
Fork 0
mirror of git://git.proxmox.com/git/pve-docs.git synced 2025-03-27 18:50:10 +03:00
Code Releases Activity

followup fíxes

Browse Source 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2019-03-19 14:46:40 +01:00
parent 7d47064e8a
commit 73b78e5efb
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pve-firewall.adoc
View File

@ -415,27 +415,22 @@ Logging of dropped packets is rate limited to 1 packet per second in order to
reduce output to the log file.
Further, only some dropped or rejected packets are logged for the standard rules.
// TODO: describe standard/default rules and note which of them get logged
In order to log packets filtered by user-defined firewall rules, it is possible
to set a log-level parameter for each rule individually.
This allows to log in a fine grained manner and independent of the log-level
defined for the standard rules.
In particular, each rule is logged independently from the log-level set for the
standard rules in the firewall `Options`.
defined for the standard rules in the firewall `Options`.
The log level for the rule can also be set via the firewall configuration file by
appending a `-log <loglevel>` to the selected rule.
Here, `<loglevel>` is one of the following flags, attached to the log output:
Here, `<loglevel>` is one of the following flags:
`nolog, emerg, alert, crit, err, warning, notice, info, debug`
For example:
For example, the following two are ident:
----
IN REJECT -p icmp -log nolog
----
is the same as
----
IN REJECT -p icmp
----