Firewalld logging

Jiri Popelka jpopelka at redhat.com
Thu Feb 7 13:25:24 UTC 2013


Hi,

On 02/07/2013 01:57 PM, Greaser, Tom wrote:
> Good morning everyone .
> I did some man-ing and goggling ,  but maybe someone can help and point me in the right direction.
>
> On my fed 18 workstation I was having troubles ,  my first thought was to look at my logs.. I found i had no way to output logs from firewall d

Firewalld logs into /var/log/firewalld
There are no debug messages by default.
If you want to enable debug messages you
have to add --debug or even --debug=2
command line option to firewalld.

On Fedora this can be generally done 2 ways:
Because Fedora has been using systemd,
take a look into /usr/lib/systemd/system/firewalld.service
there you'll see
ExecStart=/usr/sbin/firewalld --nofork $FIREWALLD_ARGS
which tells systemd how to run firewalld

so you can either
- cp /usr/lib/systemd/system/firewalld.service /etc/systemd/system
   see [1]
- edit /etc/systemd/system/firewalld.service
- add --debug to ExecStart= line so it looks like
    ExecStart=/usr/sbin/firewalld --nofork --debug=2
- systemctl --system daemon-reload
- service firewalld restart

or
- edit /etc/sysconfig/firewalld
- add --debug=2 to FIREWALLD_ARGS variable so it looks like
   FIREWALLD_ARGS=--debug=2
- service firewalld restart

--
Jiri


[1] 
http://www.freedesktop.org/wiki/Software/systemd/FrequentlyAskedQuestions


More information about the firewalld-users mailing list