On Wed, 20 Nov 2024, Marco Moock wrote: > I want to log denied traffic, but to syslog or a file rather than the > kernel ring buffer because that messes up the virtual consoles. > > What is a good way to achieve that? Ulogd2 https://www.netfilter.org/projects/ulogd/ c'ya sven-haegar -- Three may keep a secret, if two of them are dead. - Ben F.