Dropping and logging
Ulrich Eckhardt
Ulrich.Eckhardt@transcom.de
Wed, 15 Nov 2000 16:44:10 +0100
Alexander Demenshin wrote:
>
> On Tue, Nov 14, 2000 at 04:46:52PM +0100, Ulrich Eckhardt wrote:
>
> > $iptables -A LDROP --proto tcp -j LOG --log-level warn \
> > --log-prefix "TCP Drop "
> > $iptables -A LDROP --proto udp -j LOG --log-level warn \
> > --log-prefix "UDP Drop "
> > $iptables -A LDROP --proto icmp -j LOG --log-level warn \
> > --log-prefix "ICMP Drop "
> > $iptables -A LDROP -f -j LOG --log-level warn \
> > --log-prefix "FRAG Drop "
>
> What for to separate prefixes if this info be extracted from the log records? :)
Gives a nicer and better to read output, if you check the
logs manually :-)
Uli
--
Ulrich Eckhardt Tr@nscom
http://www.uli-eckhardt.de http://www.transcom.de
Lagerstraße 11-15 A8
64807 Dieburg Germany