Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Jonas Berlin <xkr47@outerspace.dyndns.org>
To: cranium2003 <cranium2003@yahoo.com>
Cc: netfilter-devel <netfilter-devel@lists.netfilter.org>,
	netfilter <netfilter@lists.netfilter.org>
Subject: Re: why incoming packet's device not logging?
Date: Sat, 21 May 2005 10:07:54 +0000	[thread overview]
Message-ID: <428F087A.6050809@outerspace.dyndns.org> (raw)
In-Reply-To: <20050521070446.49238.qmail@web33015.mail.mud.yahoo.com>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoting cranium2003 on 2005-05-21 07:04 UTC:
> hello,
>     I added 3 rules to iptables as
> iptables -A INPUT -j LOG
> iptables -A OUTPUT -j LOG
> iptables -A FORWARD -j LOG
>  But i am getting log of forward and output chain
> correctly but why when packet comes its incoming
> device is not logged. My IPTABLES is
  <snip>
> -A INPUT -j RH-Lokkit-0-50-INPUT 
> -A INPUT -j LOG 
  <snip>
> -A RH-Lokkit-0-50-INPUT -i lo -j ACCEPT 
> -A RH-Lokkit-0-50-INPUT -i eth0 -j ACCEPT 
> -A RH-Lokkit-0-50-INPUT -i eth1 -j ACCEPT 

It seems that these last three rules accept basically all packets and
thus the LOG rule is never reached.. Or do you have more network cards
than eth0 and eth1 ?

You say it works for FORWARD, but I don't think I see how it could..

I wonder if those ACCEPTs are there by mistake.. maybe they should be at
the end of the RH-Lokkit-0-50-INPUT chain instead?

If you need further help, please give more info about your network setup.

- --
- - xkr47
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCjwh5xyF48ZTvn+4RAiQnAJ96URdIrQ37/dbn2+LNUNameG3vHwCfewQ+
LJ6nyzYfe4Zg4L+Xr3ifXyE=
=npwq
-----END PGP SIGNATURE-----


  reply	other threads:[~2005-05-21 10:07 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-05-21  7:04 why incoming packet's device not logging? cranium2003
2005-05-21 10:07 ` Jonas Berlin [this message]
2005-05-21 21:32 ` Jason Opperisano
  -- strict thread matches above, loose matches on Subject: below --
2005-05-21 13:22 cranium2003

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=428F087A.6050809@outerspace.dyndns.org \
    --to=xkr47@outerspace.dyndns.org \
    --cc=cranium2003@yahoo.com \
    --cc=netfilter-devel@lists.netfilter.org \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox