* SuSEnixER; <WideGlide@MyRealBox.com> on 01 Dec, 2002 wrote:
* Graham Smith <gqs@iinet.net.au> [11-30-02 21:40]: I do not understand port:323, but port:123 did allow communication and updating the system time. I used domain#:port# instead of just opening the port.
I would have placed under FW_TRUSTED_NETS as FW_TRUSTED_NETS="ip_of_ntp_server,udp,123"
I still do not receive separate 'firewall' logs and cannot find an option to enable them, or at least to enable them separately from 'messages' as is/WAS the case in SuSE 7.3.
The installation of the SuSEfirewall2 should have sent a warning mail to root which basically says the following Formerly, the postinstall script of SuSEfirewall2 automatically added an entry kern.* -/var/log/firewall to your /etc/syslog.conf file to send firewall related syslog message into the /var/log/firewall file. This is not done any longer. Add this line yourself if you like. Hope this helps -- Togan Muftuoglu Unofficial SuSE FAQ Maintainer http://dinamizm.ath.cx