Re: [opensuse-factory] Package firewalld should not yet replace SuSEfirewall2

On 2019-08-27 14:29, Darin Perusich wrote:

That option only logs denied packets, and not allowed packets which is arguably the more important information from an auditing perspective.

-- Later, Darin

There doesn't seem to be a blanket setting for this, but it can be done using the rich language for rules, see man 5 firewalld.richlanguage There are Audit and Log settings on a per rule (per zone) basis. The RHEL documentation [1] is also fairly comprehensive I think. Cheers [1] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm... -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org