Jump to content


Photo

Box/Firewall log Structure --Clarification

Box/Firewall logs active.fwrule

  • Please log in to reply
1 reply to this topic

#1 zaki

zaki
  • Members
  • 1 posts

Posted 17 January 2018 - 08:20 AM

Hello Guys,

Whenever there is an successful admin login session there is an immediate log that follows which clearly states an active.fwrule changed. But, there is no changes being carried out. 
I am just trying to understand what this logs actually mean. Any help would be very beneficial. 

 

 

A Sample of them is included below. 

Jan 9 09:41:40 X-X-X-01/box_Firewall: Info [Admin Session @X.X.X.X] AdminAction: root logged in

Jan 9 09:41:40 X-X-X-01/box_Firewall: Info [Admin Session @X.X.X.X] Rule: active.fwrule changed

Jan 5 10:11:32 X-X-X-01/box_Firewall: Info [Admin Session @X.X.X.X] AdminAction: root logged in

Jan 5 10:11:32 X-X-X-01/box_Firewall: Info [Admin Session @X.X.X.X] Rule: active.fwrule changed

 

P.S: I am aware that box_Firewall is used to pick up configuration changes.

 

Regards,
Zaki

 



#2 Parthiban Thamizh

Parthiban Thamizh
  • Members
  • 3 posts

Posted 14 June 2018 - 08:13 AM

I'm also having the same question, but couldn't find the answers still.