I am trying to troubleshoot an iptables rule set, trying to understand where different packets are going. I have found that using "iptables -L -v" is a useful tool, with the counters telling me what's going on. To "trigger" counters I currently use LOG rules. I would actually prefer some sort of empty rule; a rule that would do nothing beyond increasing the counters. Does something like that exist ? Seems trivial to implement. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html