Franck Joncourt wrote: > Is that what you are looking for : > > iptables -A FORWARD -p icmp --icmp-type echo-request -m mark --mark 2 -j ACCEPT > iptables -A FORWARD -p icmp -m limit --limit 20/min -j LOG_ICMP Not really. I want to log only 20 ping forwarded on a minute. May be that I need to invert those lines? I think yes! iptables -A FORWARD -p icmp -m limit --limit 20/min -j LOG_ICMP iptables -A FORWARD -p icmp --icmp-type echo-request -m mark --mark 2 -j ACCEPT Michele