Firewalld - Log


This page is about the log information of firewalld

log-denied: logging rules

Add logging rules right before reject and drop rules in the INPUT, FORWARD, and OUTPUT chains for the default rules and also final reject and drop rules in zones.

firewall-cmd --get-log-denied

firewall-cmd --set-log-denied=<value>
  • value may be one of: all, unicast, broadcast, multicast, or off

log file


log for rule

A rich rule can write into the log via the following rule format

<log [prefix="prefixtext"] [level="emerg|alert|crit|err|warn|notice|info|debug"]/> [<limit value="rate/duration"/>] </log> |
<nflog [prefix="prefixtext"] [group="group id"] [queue-size="threshold"]/> [<limit value="rate/duration"/>] </nflog>

Discover More

Cheatsheet on the usage of Firewalld
Firewalld - debug / diagnostic

Set the debug level for firewalld to level. The range of the debug level is 1 (lowest level) to 10 (highest level). The debug output will be written to the firewalld log file /var/log/firewalld. ...
Firewalld OS Service / Admin

This page is the management of the OS service known as firewalld on the operating system. The system service configuration file is located at: Excerpt: See Reload firewall and keep...
What are Rich Rules or Rules in Firewalld?

Rich rule is a line of text that: begins with rule defines a list of options and terminates by an action: accept reject drop mark If a packet matches the options of the rich rule, the...

Share this page:
Follow us:
Task Runner