KFireWatcher 0.8 review

KFireWatcher is a application to view the firewall logs in a more readable form

License: GPL (GNU General Public License) File size: 20K Developer: KFireWatcher Team

0

KFireWatcher is a application to view the firewall logs in a more readable form. (just remote ip address, local if local connection, only the needed infos...)

Needs kommander 3.5, and a separate firewall-log file (you can separate firewall lines with syslog-ng).

Accepts logs multilines with line format (standard iptables):

Dec 12 12:14:47 Machine Prefix:IN=eth0 OUT= MAC=00:13:8f:4f:59:fc:00:04:ed:00:01:91:08:00 SRC=220.253.135.60 DST=192.168.1.57 LEN=48 TOS=0x10 PREC=0x40 TTL=107 ID=2699 DF PROTO=TCP SPT=1187 DPT=6081 WINDOW=65535 RES=0x00 SYN URGP=0

Requirements:
Kommander

What's New in This Release:
added tools (rightclick a line to set his remote ip as observed one): whois, a rudimentary ping, ban,unban and clean (require root privileges through kdesu, care that clean uses unsecure ip list so users could arbitrary unban ip from you machine, don't save iptables!!! iptables part is meant for session-only, cleaned at reboot). Tools features are still experimental.