LFD blocks writing to log

Sarge · Post by **Sarge** » 17 Feb 2022, 13:47

Hello,
Webmin Bandwidth monitor module reads from file
/var/log/bandwidth
records like

Feb 17 07:00:30 condor3949 kernel: BANDWIDTH_IN:IN=br0 OUT= MAC=ff:ff:ff:ff:ff:ff:d4:5d:64:ab:80:8e:08:00 SRC=148.72.175.248 DST=148.73.156.235 LEN=49 TOS=0x00 PREC=0x00 TTL=128 ID=21965 PROTO=UDP SPT=50799 DPT=32412 LEN=29

These records produced by IPTABLES settings

Code: Select all

-A FORWARD -o br0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A FORWARD -i br0 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
-A OUTPUT -o br0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A INPUT -i br0 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:

and SYSLOG-NG configuration - /etc/syslog-ng/syslog-ng.conf

Code: Select all

destination d_bandwidth {
  file("/var/log/bandwidth");
  };
filter f_bandwidth {
  facility(kern) and priority(debug);
  };
log {
  source(s_sys);
  filter(f_bandwidth);
  destination(d_bandwidth);
  };

But when LFD service is running - no any new records to /var/log/bandwidth
When I stop LFD - everything is OK again.
I've tried to set in /etc/csf/csf.conf

Code: Select all

RESTRICT_SYSLOG = "0"

but it does not give any effect.

Please, hint any other setting to try,
Regards
Serge