I don't know if this is the best board to post this on. If not, please move it or let me know to repost it on the appropriate board.
I am trying to log all vpn/anonymizer connections between all zones. The way I have figured to do this is an allow rule that looks like this:
rule 1: allow (any zone -> any zone) application (bittorrent, ipsec-esp, ike, tor, tor2web, i2p, ssh, ssh-tunnel, stun)
ruel 1+n: other rules that are blocks or allows based on different criteria.
Obviously, the problem with having an allow rule to generate logs at the top of the policy list is that some of the rules below might block these protocols for certain zones. How do I set a rule for logging but defer processing to a higher numbered rule/is there a better way to achieve what I want and am I going about this the wrong way?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!