Re: Log with iptables

[Eduardo Gonçalves <egsilva@prolan.com.br>]

Ok, I got it.

I have to re-write some rules
but it don't hurts  =]

thanks a lot

--
----- Original Message ----- 
From: "Michael Wood" <mwood@its.uct.ac.za>
To: <debian-firewall@lists.debian.org>
Sent: Wednesday, April 10, 2002 12:06 PM
Subject: Re: Log with iptables


> On Wed, Apr 10, 2002 at 11:29:51AM -0300, Eduardo Gon?alves wrote:
> [snip]
> > with ipchains:
> > #ipchains -A input -p icmp -j ACCEPT -l    --> accept and log
> > 
> > with iptables, to do the same job:
> > #iptables -A INPUT -p icmp -j LOG
> > #iptables -A INPUT -p icmp -j ACCEPT
> > 
> > 
> > Is this the correct?!
> [snip]
> 
> Yes, but you can also do something like this:
> 
> # Create a new chain called LOGACCEPT
> iptables -N LOGACCEPT
> 
> # Make it log and then accept everything
> iptables -A LOGACCEPT -j LOG
> iptables -A LOGACCEPT -j ACCEPT
> 
> # Send stuff to the LOGACCEPT chain
> iptables -A INPUT -p icmp -j LOGACCEPT
> 
> -- 
> Michael Wood <mwood@its.uct.ac.za>
> 
> 
> 


-- 
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org