Re: how to log dropped packet

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



for example:-

Accept Rule:
iptables -A block -p tcp --dport 80 -j LOG --log-level info --log-prefix "Allow 80 :"
iptables -A block -p tcp --dport 80 -j ACCEPT


Drop Rule:
iptables -A block -p tcp --dport 139 -j LOG --log-level info --log-prefix "Block 139 :"
iptables -A block -p tcp --dport 139 -j DROP


so in conclusion, the first rule u must log then follow by accpet or drop :-)



hamals@xxxxxxxxxxx wrote:


hello

I wrote all my firewall rules, and now I would like to log all packet that will be dropped by my policy rule..

..how can I do it?

what kind of rules do I need?..and where have I to write them?

thanks
_______________________________________
Connessione ed e-mail gratuita da 10 mb
consultabile tramite web e tramite pop.
www.infinito.it vieni a scoprire tutti i nostri servizi!

http://www.infinito.it/xmail






[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux