logging

[ligmania]

Is there a way log only one service in a rule of many without splitting the rule into two. For example if i have a rule like this

internet --> internal_net http, dns, smtp, Accept, Log

From this rule can i log only one service instead of all three.

[pop_alex]

Originally Posted by ligmania

Is there a way log only one service in a rule of many without splitting the rule into two. For example if i have a rule like this

internet --> internal_net http, dns, smtp, Accept, Log

From this rule can i log only one service instead of all three.

Hi,

No. It is not possible. You can't log only one service (e.g., http) in one rulebase while it also contained other services such as dns & smtp. All these services in one rulebase will be logged. You have to specifically define a rulebase based on each services.

Regards,

Al