On Fri, Feb 11, 2011 at 14:46, Pandu Poluan <pandu@xxxxxxxxxxx> wrote: > I am wondering if the following rule will work: > > iptables -t raw -A PREROUTING -p icmp -m state --state > RELATED,ESTABLISHED -j ACCEPT > Okay, to answer my own question: It won't work. Method: iptables -t raw -A PREROUTING -p icmp -m state --state RELATED,ESTABLISHED -j LOG \ --log-prefix "RP ICMP MATCH:" ping 192.168.1.1 (4 or 5 pings, then ^C) dmesg No log entries. I did that right, didn't I? Rgds, -- Pandu E Poluan ~ IT Optimizer ~ Visit my Blog: http://pepoluan.posterous.com Google Talk: pepoluan Y! messenger: pepoluan MSN / Live: pepoluan@xxxxxxxxxxx (do not send email here) Skype: pepoluan -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html