QUESTIONS (40%)

[1] Why do we need log server?

[2] What port is needed to open on syslog server?

[3] Why do you replace -m 0 to -rm 0 as following? Replace the line SYSLOGD_OPTIONS=-m 0 with SYSLOGD_OPTIONS=-r -m 0

[4] Why following firewall rule is important on syslog server? i

ptables -I RH-Firewall-1-INPUT -p udp -i eth0 -s 172.16.1.0/24 -d 172.16.1.8 --dport 514 -j ACCEPT

[5] Explain above firewall rule?

[6] How to save current firewall rule sets?

[7] How to make your syslog server become web-based so that you can check syslog from anywhere with secure manner?