On 2011-12-17 11:34 AM, Hari Purnama <h...@mapits.com> wrote:
Did you put the log-prefix rule before or after the LOG rule?
After - the log prefix rule is last...
Or why didn't you put it in a 1liner, say: -A INPUT -i eth0 -m state --state INVALID -j LOG --log-level 7 --log-prefix "(>fw-drop): " --log-ip-options --log-tcp-options
Well, because I thought the log prefix rule applied to everything that comes before it...?