Log File Forwarding Question.

[learningsun]

I want to setup a firewall using ipchains. But, I would like to forward the log files from the firewall to another system on the network. The purpose is, if someone were to successfully hack the firewall and erase the log file there would be another system holding those same logfiles.

 

[pupu]

You can use syslog. From 'man syslog.conf':
This syslogd(8) provides full remote logging, i.e. is able
to send messages to a remote host running syslogd(8) and
to receive messages from remote hosts. The remote host
won't forward the message again, it will just log them
locally. To forward messages to another host, prepend the
hostname with the at sign (``@'').

Using this feature you're able to control all syslog mes­sages on one host, if all other machines will log remotely to that. This tears down administration needs.