On Sat, Oct 05, 2002 at 11:11:49AM +0200, Jean Francois Ortolo wrote:
>
> Either do I must set both same rules, first with a LOG target, second
> with a DROP target, or may I set the two targets directly in one rule ?
>
> Example: Either 1)
> /sbin/iptables -A INPUT -i eth0 -d ${IPADDR} --syn -j LOG
> /sbin/iptables -A INPUT -i eth0 -d ${IPADDR} --syn -j DROP
Yes, this is the only way!
> or 2)
> /sbin/iptables -A INPUT -i eth0 -d ${IPADDR} --syn -j LOG DROP
LOG and DROP are both 'targets'. You can only have one target per
statement.
--
Hal Burgiss