Re: Custom log file?

On Sat, Dec 16, 2017 at 10:04:08AM +0200, Paavo Leinonen wrote:

Hi,

LogDenied=all (or anything but off) in firewalld.conf;

Is there a way to specify a custom log file, now firewalld is flooding dmesg.

Not for LogDenied. It's actually iptables (the kernel) doing the logging. Currently firewalld can't control where the logs go. For that we'd have to move to using NFLOG. I think this has been requested by others, perhaps there is already a github issue open.

IMO, logging across the board needs to be improved.