Smoothwall Firewall 

Link Logger Set Up

1.Download and Install Link Logger for iptables systems

2. Next Configure Link Logger

To find this screen select 'Edit' from the main menu and then select the 'Setup...' option and click on the 'Router' tab.  The Router Address is the internal LAN IP address of your SMoothwall firewall, and the WAN Interface is your RED or external facing interface (in this example eth1 as shown below in the Smoothwall Networking Interface screen).

3. Configure Smoothwall to send logs to Link Logger

Since Smoothwall Express doesn't have an Admin screen in which you can configure the syslog destination to which Smoothwall shuold send the logging data, we will need to open an SSH shell to Smoothwall and manually edit the /etc/syslog.conf file.  The easiest way to do this is first enable SSH access (at least temporarily) from the Smoothwall Admin screens:

The using a SSH tool like putty connect to the Smoothwall and change directory to /etc (you can also do this from the console using root).

Then using the editor of your choice (we will use VI) to open and edit the syslog.conf file adding

kern.info @xxx.xxx.xxx.xxx

to the end of the file where xxx.xxx.xxx.xxx is the LAN IP Address of the system running Link Logger. 

Save the syslog.conf file and close the editor and then restart Smoothwall and it should now start sending logging information to Link Logger.  You can also go back and disable SSH access if you wish.

FAQ for Install Issues

• If Link Logger stops logging check to see if the IP address of the logging system has changed as sometime the DHCP will assign a new IP address to the system running Link Logger and hence will not receive the logging information.

• If you get an error when starting Link Logger, please make sure that you don't have other logging software running when you start Link Logger, as only one application can process Syslog messages at a time.

• If Link Logger doesn't work and your running ZoneAlarm or any similar software firewall product please ensure that it is allowing communication between Link Logger and your Linksys Router.  Link Logger does attempt to ping your router on startup, and your Linksys Router sends its logging information to Link Logger via Syslog messages (UDP port 514).  If the ping is blocked then Link Logger displays a message stating that it couldn't communicate with the Router.  If the Syslog messages are blocked then Link Logger doesn't log anything as it doesn't receive any logging information.

• Link Logger does have an uninstall program for easy removal.  You can remove Link Logger using 'Remove Programs' in the Windows Control Panel.

If Link Logger is still not working email Link Logger Support