firewalltailer is a script that requires a lot of configuration, but once it's working, you don't have to do much to it.
1. First you have to make sure that you've got the proper prefixes on your iptables logs:
Blocked incoming: "[FW EVIL E-IN]: "
Blocked outgoing: "[FW EVIL F-IN]: "
Blocked forwarding in: "[FW EVIL F-IN]: "
Blocked forwarding out: "[FW EVIL F-OUT]: "
Dropped incoming (internal interface): "[FW DROPPED I-IN]: "
Dropped incoming (external interface): "[FW DROPPED E-IN]: "
Rejected outgoing (internal interface): "[FW REJECTED I-IN]: "
Rejected outgoing (external interface): "[FW REJECTED E-IN]: "
Rejected forwarding in: "[FW REJECTED F-IN]: "
Rejected forwarding out: "[FW REJECTED F-OUT]: "
* Note that if you're using my qFirewall, all of this is already done for you.
2. After you get through all of this, open firewalltailler in a text editor and put in the colour coding and text replacing you like using the examples given.
4. Toggle $doDNS to 1 or 0 depending on if you want dns lookups for local IPs or not.
3. Exit and run it.
Product's homepage
Requirements:
· Perl
· iptables
What's New in This Release: [ read full changelog ]
· Added support for DNS lookups for local IPs