how to log dropped packet

[Florian Boelstler]

I forgot to paste a very important statement:

Florian Boelstler wrote:
> # DROP & LOG chain
> 
> $IPTABLES -N DROPnLOG
> $IPTABLES -A DROPnLOG -p ICMP -j ULOG --ulog-nlgroup 1 --ulog-prefix
> "DROP-ICMP "
> $IPTABLES -A DROPnLOG -p TCP -j ULOG --ulog-nlgroup 1 --ulog-prefix
> "DROP-TCP "
> $IPTABLES -A DROPnLOG -p UDP -j ULOG --ulog-nlgroup 1 --ulog-prefix
> "DROP-UDP "

$IPTABLES -A DROPnLOG -j DROP

[ ... ]