You are not logged in.
The most recent upgrade of Iptables version 1.4.14-2 breaks -j LOG --log-prefix. The defined log prefix does not display in the log, instead " --log-prefix" shows along with the packet info. Prior to this version, it had functioned correctly.
Example:
Rule:
iptables -A OUTPUT -o eth1 -d $i -m limit --limit 5/hour -j LOG --log-prefix "Filter BlKD OUTPUT GTW:"Output:
Jun 25 14:13:37 localhost kernel: [23656.707870] --log-prefixIN= OUT=eth1 SRC=192.168.44.10 DST=50.17.216.71 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=27158 DF PROTO=TCP SPT=40970 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0A Netfilter Bugzilla bug report has already been filed by a Debian Linux user. I have added to it.
Link: http://bugzilla.netfilter.org/show_bug.cgi?id=782
Regards,
Eugene
Last edited by ejmarkow (2012-06-25 13:17:02)
Offline
Just an update, the previously mentioned Netfilter Bugzilla bug report has been merged to "Bug 774 - iptables-restore can't parses the quoted parameter correctly. " : http://bugzilla.netfilter.org/show_bug.cgi?id=774
The issue is acknowledged and currently being worked on.
Offline
Confirmed... my iptables.log is truly messed up. Thanks for reporting this.
Arch Linux is more than just GNU/Linux -- it's an adventure
pkill -9 systemd
Offline
Seems to be the same on Ubuntu 12.04, kernel 3.4.x.
Offline