ryanc/ansible
1
0
Fork 0
Code Issues 4 Pull Requests Releases Wiki Activity

Clean up ulogd.conf template

Browse Source
This commit is contained in:
Ryan Cavicchioni
2019-11-25 18:24:14 -06:00
parent 13d12faa86
commit 4540766d80
2 changed files with 40 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
roles/firewall/templates/ulogd.conf.j2
View File

@ -1,10 +1,10 @@
[global]
# logfile for status messages
#logfile="syslog"
logfile="syslog"
# loglevel: debug(1), info(3), notice(5), error(7) or fatal(8) (default 5)
#loglevel=3
loglevel={{ firewall_ulogd_loglevel | default(3) }}
plugin="/usr/lib/x86_64-linux-gnu/ulogd/ulogd_inppkt_NFLOG.so"
plugin="/usr/lib/x86_64-linux-gnu/ulogd/ulogd_inpflow_NFCT.so"
@ -15,12 +15,31 @@ plugin="/usr/lib/x86_64-linux-gnu/ulogd/ulogd_filter_PRINTFLOW.so"
plugin="/usr/lib/x86_64-linux-gnu/ulogd/ulogd_output_SYSLOG.so"
plugin="/usr/lib/x86_64-linux-gnu/ulogd/ulogd_raw2packet_BASE.so"
# this is a stack for logging packets to syslog after a collect via NFLOG
stack=log1:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,sys1:SYSLOG
{% if firewall_ulogd_packet_mode_enabled %}
stack=packet:NFLOG,base1:BASE,ifi1:IFINDEX,ip2str1:IP2STR,print1:PRINTPKT,syslog-packet:SYSLOG
{% endif %}
{% if firewall_ulogd_flow_mode_enabled %}
stack=flow:NFCT,ip2str1:IP2STR,print1:PRINTFLOW,syslog-flow:SYSLOG
{% endif %}
[log1]
group={{ firewall_ulogd_nflog_group | default(0) }}
{% if firewall_ulogd_packet_mode_enabled %}
[packet]
group={{ firewall_ulogd_nflog_group | default(1) }}
{% endif %}
[sys1]
facility={{ firewall_ulogd_syslog_facility | default("LOG_LOCAL0") }}
level={{ firewall_ulogd_syslog_level | default("LOG_INFO") }}
{% if firewall_ulogd_flow_mode_enabled %}
[flow]
#group={{ firewall_ulogd_nflog_group | default(1) }}
{% endif %}
{% if firewall_ulogd_packet_mode_enabled %}
[syslog-packet]
facility={{ firewall_ulogd_packet_mode_syslog_facility | default("LOG_LOCAL0") }}
level={{ firewall_ulogd_packet_mode_syslog_level | default("LOG_INFO") }}
{% endif %}
{% if firewall_ulogd_flow_mode_enabled %}
[syslog-flow]
facility={{ firewall_ulogd_flow_mode_syslog_facility | default("LOG_LOCAL1") }}
level={{ firewall_ulogd_flow_mode_syslog_level | default("LOG_INFO") }}
{% endif %}