• Comment logguer le NAT avec NFTables ?

    From Olivier@21:1/5 to All on Tue Nov 16 19:20:02 2021
    Bonjour,

    NFtables remplace IPTables depuis Buster/Bullseye (même si la transition s'opère progressivement).

    1. Sur une machine Buster faisant office de routeur et s'appyant sur
    NFTablles (et non IPTables), comment émettre des stats Netflow vers un collecteur local ou distant ?

    2. Alternativement comment logguer le NAT avec le tuplet complet (IP src/IP dst/port source/dst ...) ?

    Slts

    <div dir="ltr"><div>Bonjour,</div><div><br></div><div>NFtables remplace IPTables depuis Buster/Bullseye (même si la transition s&#39;opère progressivement).</div><div><br></div><div>1. Sur une machine Buster faisant office de routeur et s&#39;appyant
    sur NFTablles (et non IPTables), comment émettre des stats Netflow vers un collecteur local ou distant ?</div><div><br></div><div>2. Alternativement comment logguer le NAT avec le tuplet complet (IP src/IP dst/port source/dst ...) ?</div><div><br></div><
    Slts<br></div></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From benoit@21:1/5 to All on Wed Nov 17 17:00:01 2021
    This is a multi-part message in MIME format.

    Qm9uam91ciwKCkplIHN1aXMgbGEgcXVlc3Rpb24sIGRlIHByw6hzIGV0IGplIHZhaXMgZW4gcG9z ZXIgdW5lIGF1dHJlIHN1ciBsZSBtw6ptZSBzdWpldCwgcGV1dC3DqnRyZSBxdWUgdHUgc2F1cmFz IG1lIHLDqXBvbmRyZS4KCi0tCkJlbm9pdAoKU2VudCB3aXRoIFtQcm90b25NYWlsXShodHRwczov L3Byb3Rvbm1haWwuY29tLykgU2VjdXJlIEVtYWlsLgoK4oCQ4oCQ4oCQ4oCQ4oCQ4oCQ4oCQIE9y aWdpbmFsIE1lc3NhZ2Ug4oCQ4oCQ4oCQ4oCQ4oCQ4oCQ4oCQCkxlIG1hcmRpIDE2IG5vdmVtYnJl IDIwMjEgw6AgMTk6MTcsIE9saXZpZXIgPG96YS40aDA3QGdtYWlsLmNvbT4gYSDDqWNyaXQgOgoK PiBCb25qb3VyLAo+Cj4gTkZ0YWJsZXMgcmVtcGxhY2UgSVBUYWJsZXMgZGVwdWlzIEJ1c3Rlci9C dWxsc2V5ZSAobcOqbWUgc2kgbGEgdHJhbnNpdGlvbiBzJ29ww6hyZSBwcm9ncmVzc2l2ZW1lbnQp Lgo+Cj4gMS4gU3VyIHVuZSBtYWNoaW5lIEJ1c3RlciBmYWlzYW50IG9mZmljZSBkZSByb3V0ZXVy IGV0IHMnYXBweWFudCBzdXIgTkZUYWJsbGVzIChldCBub24gSVBUYWJsZXMpLCBjb21tZW50IMOp bWV0dHJlIGRlcyBzdGF0cyBOZXRmbG93IHZlcnMgdW4gY29sbGVjdGV1ciBsb2NhbCBvdSBkaXN0 YW50ID8KPgo+IDIuIEFsdGVybmF0aXZlbWVudCBjb21tZW50IGxvZ2d1ZXIgbGUgTkFUIGF2ZWMg bGUgdHVwbGV0IGNvbXBsZXQgKElQIHNyYy9JUCBkc3QvcG9ydCBzb3VyY2UvZHN0IC4uLikgPwo+ Cj4gU2x0cw==

    PGRpdj5Cb25qb3VyLDxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkplIHN1aXMgbGEgcXVl c3Rpb24sIGRlIHByw6hzIGV0IGplIHZhaXMgZW4gcG9zZXIgdW5lIGF1dHJlIHN1ciBsZSBtw6pt ZSBzdWpldCwgcGV1dC3DqnRyZSBxdWUgdHUgc2F1cmFzIG1lIHLDqXBvbmRyZS48YnI+PC9kaXY+ PGRpdj48YnI+PC9kaXY+PGRpdj4tLTxicj48L2Rpdj48ZGl2PkJlbm9pdDxicj48L2Rpdj48ZGl2 Pjxicj48L2Rpdj48ZGl2IGNsYXNzPSJwcm90b25tYWlsX3NpZ25hdHVyZV9ibG9jayI+PGRpdiBj bGFzcz0icHJvdG9ubWFpbF9zaWduYXR1cmVfYmxvY2stdXNlciBwcm90b25tYWlsX3NpZ25hdHVy ZV9ibG9jay1lbXB0eSI+PC9kaXY+PGRpdiBjbGFzcz0icHJvdG9ubWFpbF9zaWduYXR1cmVfYmxv Y2stcHJvdG9uIj5TZW50IHdpdGggPGEgcmVsPSJub29wZW5lciBub3JlZmVycmVyIiBocmVmPSJo dHRwczovL3Byb3Rvbm1haWwuY29tLyIgdGFyZ2V0PSJfYmxhbmsiPlByb3Rvbk1haWw8L2E+IFNl Y3VyZSBFbWFpbC48L2Rpdj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2IGNsYXNzPSJwcm90b25t YWlsX3F1b3RlIj4NCiAgICAgICAg4oCQ4oCQ4oCQ4oCQ4oCQ4oCQ4oCQIE9yaWdpbmFsIE1lc3Nh Z2Ug4oCQ4oCQ4oCQ4oCQ4oCQ4oCQ4oCQPGJyPg0KICAgICAgICBMZSBtYXJkaSAxNiBub3ZlbWJy ZSAyMDIxIMOgIDE5OjE3LCBPbGl2aWVyICZsdDtvemEuNGgwN0BnbWFpbC5jb20mZ3Q7IGEgw6lj cml0IDo8YnI+DQogICAgICAgIDxibG9ja3F1b3RlIGNsYXNzPSJwcm90b25tYWlsX3F1b3RlIiB0 eXBlPSJjaXRlIj4NCiAgICAgICAgICAgIDxkaXYgZGlyPSJsdHIiPjxkaXY+Qm9uam91ciw8L2Rp dj48ZGl2Pjxicj48L2Rpdj48ZGl2Pk5GdGFibGVzIHJlbXBsYWNlIElQVGFibGVzIGRlcHVpcyBC dXN0ZXIvQnVsbHNleWUgKG3Dqm1lIHNpIGxhIHRyYW5zaXRpb24gcydvcMOocmUgcHJvZ3Jlc3Np dmVtZW50KS48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PjEuIFN1ciB1bmUgbWFjaGluZSBCdXN0 ZXIgZmFpc2FudCBvZmZpY2UgZGUgcm91dGV1ciBldCBzJ2FwcHlhbnQgc3VyIE5GVGFibGxlcyAo ZXQgbm9uIElQVGFibGVzKSwgY29tbWVudCDDqW1ldHRyZSBkZXMgc3RhdHMgTmV0ZmxvdyB2ZXJz IHVuIGNvbGxlY3RldXIgbG9jYWwgb3UgZGlzdGFudCA/PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRp dj4yLiBBbHRlcm5hdGl2ZW1lbnQgY29tbWVudCBsb2dndWVyIGxlIE5BVCBhdmVjIGxlIHR1cGxl dCBjb21wbGV0IChJUCBzcmMvSVAgZHN0L3BvcnQgc291cmNlL2RzdCAuLi4pID88L2Rpdj48ZGl2 Pjxicj48L2Rpdj48ZGl2PlNsdHM8YnI+PC9kaXY+PC9kaXY+DQoNCiAgICAgICAgPC9ibG9ja3F1 b3RlPjxicj4NCiAgICA8L2Rpdj4=

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)