Firewalling

[r@nd0m @cce$]

I have succesfully setup pmfirewall on my system, but I am now interested on monitoring my connection and I was wondering if you guys could suggest a good monitoring tool?

By monitoring tool I mean something like portsentry and such. All I need is a tool I can use with my home network.

Also, is there a way to limit a log file size?

Thanks.

[cotfessi]

From what I understand, a program like Portsentry works after a firewall implementation. In other words, if you block all incoming packets to port 80, portsentry will never go off if someone sends a packet to port 80.

you can always use the log option within the firewall itself to monitor any odd packets...

[X_console]

portsentry won't do you much good if your firewall is already blocking most of the ports. That is, ipchains will drop packets before they hit portsentry, so portsentry will sit there idle most of the time until a packet manages to pass through ipchains and gets blocked by portsentry. All firewall logs should be found in /var/log/messages

You can't really limit the size of the log file, but what you can do is to rotate the log file. That is, if a log reaches say, 5MB, you compress it and store it someplace safe, and then create an empty logfile. You can use logrotate for this, or if you're feeling brave, write a script that does it for you.