Dropping and logging

Ulrich Eckhardt Ulrich.Eckhardt@transcom.de
Wed, 15 Nov 2000 16:44:10 +0100


Alexander Demenshin wrote:
> 
> On Tue, Nov 14, 2000 at 04:46:52PM +0100, Ulrich Eckhardt wrote:
> 
> > $iptables -A LDROP --proto tcp -j LOG --log-level warn \
> >                                            --log-prefix "TCP Drop "
> > $iptables -A LDROP --proto udp -j LOG --log-level warn \
> >                                            --log-prefix "UDP Drop "
> > $iptables -A LDROP --proto icmp -j LOG --log-level warn \
> >                                            --log-prefix "ICMP Drop "
> > $iptables -A LDROP -f -j LOG --log-level warn \
> >                                   --log-prefix "FRAG Drop "
> 
>   What for to separate prefixes if this info be extracted from the log records? :)

Gives a nicer and better to read output, if you check the
logs manually :-)

Uli
-- 
Ulrich Eckhardt                         Tr@nscom  
http://www.uli-eckhardt.de              http://www.transcom.de
                                        Lagerstraße 11-15 A8
                                        64807 Dieburg Germany