Don't understand these errors with logdrop target

Don't understand these errors with logdrop target

[Steve Comfort]

Hi All,

Below is a snippet from my setup script :

        echo 1

        $IPTABLES -N LOGDROP
        $IPTABLES -A LOGDROP -j LOG --log-level debug
        $IPTABLES -A LOGDROP -j DROP

        echo 2

        $IPTABLES -P INPUT LOGDROP
       
        echo 3
       
        $IPTABLES -P OUTPUT LOGDROP
       
        echo 4
       
        $IPTABLES -P FORWARD LOGDROP

        echo 5

When this is run, I see the output below (the echo's are just to zone in 
on the exact rule(s) generating errors):

1
2
iptables: Bad policy name
3
iptables: Bad policy name
4
iptables: Bad policy name
5

The question is : Why does using LOGDROP as a policy cause these errors?

(I have CONFIG_IP_NF_TARGET_LOG set BTW).

Best regards
Steve Comfort

Re: Don't understand these errors with logdrop target

[Cedric Blancher]

Le mer 25/08/2004 à 10:36, Steve Comfort a écrit :
>         echo 2
>         $IPTABLES -P INPUT LOGDROP
[...]
> 2
> iptables: Bad policy name
> The question is : Why does using LOGDROP as a policy cause these errors?

Because only builtin targets can be used as policy, meaning ACCEPT and
DROP. If you want to use your LOGDROP as "policy", then you'll have to
keep it as last chain rule...


-- 
http://www.netexit.com/~sid/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!