[pve-devel] [PATCH] prepare code for more generic firewall logging

Wolfgang Bumiller w.bumiller at proxmox.com
Mon Sep 18 14:07:37 CEST 2017


> On September 18, 2017 at 1:34 PM Dietmar Maurer <dietmar at proxmox.com> wrote:
> 
> 
> > With that in mind, I have no objections to this patch (or a version of
> > it, see the inline comments below).
> 
> But logging all Dropped package would produce an incredible amount of logs?

That's where the log level comes in. Also, in his first mail he also mentioned
the possibility of flagging a rule or security group to be logged.

This patch as it is has only non-functional changes. Ideally we'd apply it
later as part of the series with the actual changes, rather than on its own
as well, because otherwise it's probably not needed anyway, at least for now.




More information about the pve-devel mailing list