Hi Folks,
I wondering if someone try to have some iptables logs in a Turris Omnia lxc container ?
I have one lxc (debian buster) with iptables and logs doesn’t work.
That seem normal due to the security kernel options.
I try to use NFLOG and ulogd2, because in my understanding it’s the only way to capture events in other network nanespaces, but I’m not able to configure it.
Any ideas ?
similar?
@jiberjaber not really, that’s sound normal to received all logs when we share the same kernel, but ulogd2 have the ability to monitor different network namespace. Network namespace allow you to accept packet on a container that are rejected by the host.
To have network logs in container, I think it’s necessary to activate it with this command on the turris host :
echo 1 > /proc/sys/net/netfilter/nf_log_all_netns
I’m not a specialist, so, is there a risk to activate this on the turris omnia ?