SOLVED Re: [CLUE-Tech] turning on verbose logging for iptables?

[David Anselmi]

Dave Price wrote:
 >
> I also like the suggestion about tcpdump on the firewall - just for
> general principles!

Well, putting a NIC in promiscuous mode and running an extra service on 
the box (and perhaps logging into it to play with the data) are probably 
not things that security types would recommend for a firewall.  But if 
you're not really paranoid and don't have a better place to put it, what 
the heck?

Dave