Andrew Myers

If the /var/log/iptables.log file is the default, and the patch to the script works, then it sounds fairly simple. So let us know if those two changes made it work. The patch was not needed in the end. I am slightly surprised that the iptables.log is not in the iptables configuration file as a default, that is all. Thanks for your all your help. Great to have logwatch back again. :)

I am getting somewhere now. Added LogFile = /var/log/iptables.log to the iptables default conf file and I am getting some results. Ulogd is not installed by default in Arch and is not even included in the Artix repos. Do you think that the iptables.log entry should be included in the default iptables configuration?

Things are not working out well for me I'm afraid. The patch made no difference so I completely reinstalled logwatch. Then I changed Service = All to Service = iptables and received the error: Wrong configuration entry for "Service", if "All" selected, only "-" items are allowed Same for sudo I don't understand why? Edit: There is no /var/log/ulogd

Things are not working out well for me I'm afraid. The patch made no difference so I completely reinstalled logwatch. Then I changed Service = All to Service = iptables and received the error: Wrong configuration entry for "Service", if "All" selected, only "-" items are allowed Same for sudo I don't understand why?

I am running logwatch 7.9 on Articx linux 6.6.4 with ufw 0.36.2 Ufw is logging to /var/log/iptables.log $ sudo tail /var/log/iptables.log Dec 15 16:39:52 acer kernel: [UFW BLOCK] - etc... /usr/share/logwatch/default.conf/services/iptables.conf includes: LogFile = messages LogFile = iptables logwatch.conf includes: Service = All So why do I not see any iptables section in the logwatch report?

I am running logwatch 7.p on Articx linux 6.6.4 with ufw 0.36.2 Ufw is logging to /var/log/iptables.log $ sudo tail /var/log/iptables.log Dec 15 16:39:52 acer kernel: [UFW BLOCK] - etc... /usr/share/logwatch/default.conf/services/iptables.conf includes: LogFile = messages LogFile = iptables logwatch.conf includes: Service = All So why do I not see any iptables section in the logwatch report?

It seems that Arch linux has a modified version of logwatch in it's repos. Installing from source fixed it. PS. I am on Artix, which is Arch without systemd :)

Yes, it seems I was right. So sorry for wasting your time :)