Arch Linux

tommed

Member

From: Berkshire, Engalnd

Registered: 2009-06-10

Posts: 54

Website

Can't get iptables working with psad

I installed psad using the AUR package at:

https://aur.archlinux.org/packages.php?ID=33800

Then directed "facility(kern)" to /var/lib/psad/psadfifo and cleaned up the config file (which contained my home directory as someone else mentions here), so it looks like this:

http://pastebin.com/kJSJ9YfP

but psad -S still shows counters of zero?? I am testing from a remote machine using:

nmap -PN IP_ADDR

And have checked /var/log/everything.log and can see the failed requests being logged by my iptables rules.
Why is this not working? Have I/this script missed something??

Config file here:

http://pastebin.com/jdZwrc2j

Thanks!