how to log dropped packet

Florian Boelstler euphoria at arcor.de
Tue Sep 28 17:37:06 CEST 2004


I forgot to paste a very important statement:

Florian Boelstler wrote:
> # DROP & LOG chain
> 
> $IPTABLES -N DROPnLOG
> $IPTABLES -A DROPnLOG -p ICMP -j ULOG --ulog-nlgroup 1 --ulog-prefix
> "DROP-ICMP "
> $IPTABLES -A DROPnLOG -p TCP -j ULOG --ulog-nlgroup 1 --ulog-prefix
> "DROP-TCP "
> $IPTABLES -A DROPnLOG -p UDP -j ULOG --ulog-nlgroup 1 --ulog-prefix
> "DROP-UDP "

$IPTABLES -A DROPnLOG -j DROP

[ ... ]





More information about the netfilter mailing list