Re: Log with iptables

[Michael Wood <mwood@its.uct.ac.za>]

On Wed, Apr 10, 2002 at 11:29:51AM -0300, Eduardo Gon?alves wrote:
[snip]
> with ipchains:
> #ipchains -A input -p icmp -j ACCEPT -l    --> accept and log
> 
> with iptables, to do the same job:
> #iptables -A INPUT -p icmp -j LOG
> #iptables -A INPUT -p icmp -j ACCEPT
> 
> 
> Is this the correct?!
[snip]

Yes, but you can also do something like this:

# Create a new chain called LOGACCEPT
iptables -N LOGACCEPT

# Make it log and then accept everything
iptables -A LOGACCEPT -j LOG
iptables -A LOGACCEPT -j ACCEPT

# Send stuff to the LOGACCEPT chain
iptables -A INPUT -p icmp -j LOGACCEPT

-- 
Michael Wood <mwood@its.uct.ac.za>


-- 
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org