monitor changes to iptables

[William Cohen]

On 10/10/2017 10:49 AM, Daniel Doron wrote:
> Hi,
> 
> I am trying to figure out a way to monitor and log changes to iptables
> (netfilter). Any ideas would be appreciated...
> 
> Thanks.
> Daniel.
> 

Hi Daniel,

Would you need to use systemtap for this or would using auditctl as mentioned in the following be sufficient?

https://unix.stackexchange.com/questions/206891/audit-on-changes-to-the-running-iptables-configuration


-Will