jueves, 21 de febrero de 2008

fwlogwatch: Parser de logs de firewall

#instalar fwlogwatch
emerge fwlogwatch

#encriptar passwd para administración web
htpasswd -nb usuario password

#configurar fwlogwatch.conf
resolve_hosts = no
resolve_services = yes
src_ip = on
dst_ip = on
protocol = on
src_port = on
dst_port = on
#tcp_opts = off
start_times = yes
html = no
realtime_response = yes
server_status = yes
bind_to = 127.0.0.1
listen_port = 888
status_user = admin
status_password = Mm8x5Giqba37U
refresh = 15

#ejecutar como servicio
fwlogwatch -R

No hay comentarios: