EFW Support

Support => General Support => Topic started by: marcwolf on Sunday 17 January 2010, 02:13:32 pm



Title: 2.3 - how to log blocked outgoing firewall packets?
Post by: marcwolf on Sunday 17 January 2010, 02:13:32 pm
Hi everyone,

I've got Endian 2.3 setup and running well, but there's something I can't make happen in 2.3, anyone know how?

I want to log any outgoing packets and/or connections that are blocked by the Outgoing firewall.

Obviously so that any attempts of devices on the internal interfaces to get out unusual/blocked ports are logged, and I can then identify them and then let them out permanently or not.
Sounds simple, but I can't find any combination of options for it!
All the options are to "Log all accepted packets" in the individual rules, or "Log accepted outgoing connections" overall, nothing for logging blocked.

Any tips much appreciated!

Cheers,
Marc


Title: Re: 2.3 - how to log blocked outgoing firewall packets?
Post by: StephanSch on Sunday 17 January 2010, 09:31:30 pm
In 2.2 this option was in the firewall properties at the bottom.


Title: Re: 2.3 - how to log blocked outgoing firewall packets?
Post by: marcwolf on Sunday 17 January 2010, 10:42:47 pm
Nothing seems to be there in 2.3... Got a "Log accepted outgoing connections", but nothing about logging blocked packets/connections,
any ideas anyone?

(thanks for the reply btw!)


Title: Re: 2.3 - how to log blocked outgoing firewall packets?
Post by: marcwolf on Wednesday 27 January 2010, 11:05:43 am
Anyone? <bump>

There must be a way to log all outgoing packets that are *blocked* by the Outgoing firewall?

Cheers,
Marc