（转）CentOS6 iptables 记录指定IP的网络访问日志

#DIY iptables Log save
#kern.warning /var/log/iptables/iptables.log
kern.debug /var/log/iptables/iptables.log

-A INPUT -p tcp -m limit --limit 1/sec -j LOG --log-level 7

#!/bin/bash

#clear iptables Log

YY=`date +%Y`
mm=`date +%m`
dd=`date +%d`
Basedic='/var/log/iptables'

cd $Basedic
/bin/mkdir -p ${YY}/${mm}
/bin/mv iptables.${YY}${mm}* ${YY}/${mm}
~
# clean up  循环删除1年前日志find /var/log/iptables/ -type f -mtime +365 -exec rm -f {} \;

#!/bin/bash
##
#
timer=`date +%Y%m%d`
addrs="/var/log/iptables"

/bin/mv $addrs/iptables.log{,.$timer}
/bin/touch $addrs/iptables.log
/etc/init.d/rsyslog restart
cd $addrs && /bin/tar -zcf iptables.$timer.tar.gz iptables.log.$timer --remove-files