* Quoting andrew lattis ([EMAIL PROTECTED]): > #### > #connections to lo > $iptables -A OUTPUT -p ALL -o $lo_iface -s $lo_ip -j ACCEPT > > #allow the rest > $iptables -A OUTPUT -p ALL -o $eth_iface -s $eth_ip -j ACCEPT > > #log the rest > $iptables -A OUTPUT -m limit --limit $log_limit --limit-burst > $log_limit_burst -p tcp -j LOG --log-prefix "output tcp:" > $iptables -A OUTPUT -m limit --limit $log_limit --limit-burst > $log_limit_burst -p udp -j LOG --log-prefix "output udp:"
You should not forget to log other protokols like icmp, ... It's best to log any packet here. - rk -- Ahahahahaha! Ahahahaha! Aahahaha! BEWARE!!!!! Yrs sincerely The Opera Ghost
