http://linuxexchange.org/questions/2355/iptables-and-sudo-not-logging<p>I have Ubuntu 10.04.2LTS 32-bit Desktop Edition and it's the same on 3 different systems.</p> <p>iptables and sudo aren't logging and I need them to be.</p> <p>1) None of them have the auth.log in /etc which is used for logging sudo commands/login authorizations</p> <p>2) None of them have the syslog.conf file in /etc (but one does exist under /usr/share/logwatch/default.conf/logfiles/syslog.conf)</p> <p>3) I've looked in the "Log Viewer" in Gnome and in /etc</p> <p>I need to enable and monitor these loggings somehow.</p>enSun, 17 Apr 2011 22:52:37 -0400http://linuxexchange.org/questions/2355/iptables-and-sudo-not-logging/2364<p>I figured it out. I installed sysklogd, had to setup logging in iptables and a few minor tweaks to get it going, so I solved it myself.</p>RonSun, 17 Apr 2011 22:52:37 -0400http://linuxexchange.org/questions/2355/iptables-and-sudo-not-logging/2364http://linuxexchange.org/questions/2355/iptables-and-sudo-not-logging#2357<p>I installed sysklogd but it's not running as a daemon yet. You can see my iptables setup at <a href="http://dl.dropbox.com">http://dl.dropbox.com</a>/u/914191/install-script/TESTING/iptables-140.sh</p>RonThu, 14 Apr 2011 16:59:27 -0400http://linuxexchange.org/questions/2355/iptables-and-sudo-not-logging#2357http://linuxexchange.org/questions/2355/iptables-and-sudo-not-logging/2356<p>iptables will only log, if you tell it to, and then depending on which log level you chose will depend on where it's directed. Once you know that you can setup in syslog.conf where the file is placed. Sudo tends to log whereever ssh does.</p>rfelsburgThu, 14 Apr 2011 15:56:16 -0400http://linuxexchange.org/questions/2355/iptables-and-sudo-not-logging/2356