Log with iptables

[Eduardo Gonçalves <egsilva@prolan.com.br>]

Hello friends,

I'm moving my firewall to an iptables based system, and I have a question
about logs...
Using ipchains to log any matched rule, with any target, I just use -l .

Now, to log using iptables, I have to use the target LOG. and what about the
old target of the rule?!  I have to put the same rule two times, to log the
packet, and to ACCEPT, DROP,....?

example:
with ipchains:
#ipchains -A input -p icmp -j ACCEPT -l    --> accept and log

with iptables, to do the same job:
#iptables -A INPUT -p icmp -j LOG
#iptables -A INPUT -p icmp -j ACCEPT


Is this the correct?!


thanks a lot
Eduardo
--


-- 
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org