Re: iptable log-message

From: "Tim" <ignored_mailbox@xxxxxxxxxxxx>

Harald Hoyer

------- iptables firewall Begin --------

 Logged 171 packets on interface eth0
   From 137.227.xxx.xxx - 171 packets to tcp(N1,N2,N3,...,Nn)

jdow:

The log message suggests that iptables is already dropping or
rejecting the packets and logging them.

Not intuitively...  That says it logged them, it doesn't explicitly say
it's logged prevented connections.  It'd be less worrying for people if
it said "logged and dropped packets," or words to that effect.  For all
you know, it's logged something unusual that *happened*.

--
(This box runs FC6, my others run FC4 & FC5, in case that's
important to the thread.)

That depends on the way the firewall is setup. Mine, which is a roll
your own firewall, ends up looking like this:

Logged 472 packets on interface eth1

Those are all dropped and logged.

(The Washington Post? (12.129.147.9) Really. They are snoopy sorts,
aren't they?)

{^_^}