On Tue, 2007-09-11 at 10:05 -0700, Knute Johnson wrote:
> Turns out it doesn't log connections from clients and that is what I
> was looking for.
I suppose you could make up some iptables rules that logged connections
to the NTP ports.
e.g. iptables --append INPUT --jump LOG --protocol udp --destination-port ntp --log-prefix "firewall{NTP}: "
But, if you have other rules generated beforehand, you'd might have to
insert rather than append.
You'd find something with lines beginning with "firewall{NTP}:" in
your /var/log/messages file for accesses to that port.
--
[tim@bigblack ~]$ uname -ipr
2.6.22.4-65.fc7 i686 i386
Using FC 4, 5, 6 & 7, plus CentOS 5. Today, it's FC7.
Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.
