firewalld¶ sudo firewall-cmd --set-log-denied=all value may be one of: all, unicast, broadcast, multicast, or off sudo journalctl -x -f | grep 'DROP\|REJECT' afterwards