On Sun, Oct 06, 2002 at 02:55:27PM +0200, Michael Schwendt wrote:
> On Sat, 5 Oct 2002 22:20:56 -0400, Hal Burgiss wrote:
> 
> > > LOG doesn't terminate processing. 
> > 
> > Of course not ...
> 
> Why "of course"? With ipchains a LOG target is the end of a chain.

"Of course", because there was no implication otherwise, and because
it is clearly documented as such.

> With netfilter it is different.

There was no LOG *target* with ipchains. Just a command line option,
that could be combined with other options and/or Targets. Targets are
a different concept altogether, and even with ipchains, only one
Target per rule is allowed. This much is no different. What is
distinctly different is that logging with ipchains was activated with
a command line option, and with iptables it is only via a Target. The
LOG target does not terminate a _chain_, as some (most?) other Targets
do. 

-- 
Hal Burgiss
 




Reply via email to