edit: after the first comment, I adapted the question

When adding a rule in GUFW/Advanced there are three choices for logging. From the man ufw page/sectin LOGGING i learned

  • do not log - log nothing
  • log - logs all blocked packets for that rule and maybe new/invalid packets. There is a rate limiting
  • log-all - logs all packets with rate limit

As ufw has the log levels (off/low/medium/high/full) its not clear what the mapping is, but it seems sure that everything beside "off" should log all packets that are caught by the rule where log is set.

According to man ufw logging goes into the syslog together with a lot of other suff. So naturally I would expect the GUI Log page to show those log entries.

However, I did not manage to get any packet log entries listed in the Log pane. How can that be done?

  • Since GUFW is a front end to ufw you will likely find the answer to your first question in man ufw (in short, they refer to the per-rule logging capability and correspond to no logging, logging of new connections, and logging of all packets respectively) – steeldriver Sep 20 '18 at 15:46
  • Thanks for the hint. Didn't think of the obvious. Adding the question with that info, because whats left is how to see it – CatMan Sep 20 '18 at 16:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.