Forum Discussion
cymru81
Altocumulus
Altocumulusirule logging?
Hi, we have the following irule that drops blacklisted IPs in place. Is there any way to log when this is triggered and how would we access this log if possible?
when CLIENT_ACCEPTED {
if { [c...
cymru81Altocumulus
AltocumulusHave implemented the logging and it appears to be loggin even successful connections (may be wrong??):
Wed Aug 26 14:43:17 BST 2015 info lb1 tmm[10908] Rule /Common/blacklisted-ips : 1.2.3.4 blocked due to blacklisting
Can we change logging so only blocked clients on the data lists attempting to connect are logged?
