From: | Tanstaafl <tanstaafl@×××××××××××.org> | ||
---|---|---|---|
To: | gentoo-user@l.g.o | ||
Subject: | Re: [gentoo-user] iptables question... | ||
Date: | Sat, 17 Dec 2011 17:26:28 | ||
Message-Id: | 4EECD074.2020407@libertytrek.org | ||
In Reply to: | Re: [gentoo-user] iptables question... by Hari Purnama |
1 | On 2011-12-17 11:34 AM, Hari Purnama <hari@××××××.com> wrote: |
2 | > Did you put the log-prefix rule before or after the LOG rule? |
3 | |
4 | After - the log prefix rule is last... |
5 | |
6 | > Or why didn't you put it in a 1liner, say: |
7 | > |
8 | > -A INPUT -i eth0 -m state --state INVALID -j LOG --log-level 7 |
9 | > --log-prefix "(>fw-drop): " --log-ip-options --log-tcp-options |
10 | |
11 | Well, because I thought the log prefix rule applied to everything that |
12 | comes before it...? |