If you compare iptabels of 2.4 with OpenBSD's netfilter you notice
something is wrong when it comes to logging.
OpenBSD does logs very easily and with a lot of info, just what you expect
from a firewall.
BUT!!! I cannot get any info out of iptables, just a little tiny bit.
Say, how do you log this rule:
iptables -A OUTPUT -t nat -p tcp -d 1.2.3.4 --dport 8080 \
-j DNAT --to 192.168.1.1:80
The only logging I could find was to use the -j option LOG but you cannot
use two -j options at the same time.
I hope I have misunderstood something and that I don't have to format my
linux 2.4 partion and install OpenBSD
Regards,
Mads