* Quoting andrew lattis ([EMAIL PROTECTED]): > #### > #connections to lo > $iptables -A OUTPUT -p ALL -o $lo_iface -s $lo_ip -j ACCEPT > > #allow the rest > $iptables -A OUTPUT -p ALL -o $eth_iface -s $eth_ip -j ACCEPT > > #log the rest > $iptables -A OUTPUT -m limit --limit $log_limit --limit-burst $log_limit_burst -p >tcp -j LOG --log-prefix "output tcp:" > $iptables -A OUTPUT -m limit --limit $log_limit --limit-burst $log_limit_burst -p >udp -j LOG --log-prefix "output udp:"
You should not forget to log other protokols like icmp, ... It's best to log any packet here. - rk -- Ahahahahaha! Ahahahaha! Aahahaha! BEWARE!!!!! Yrs sincerely The Opera Ghost -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
