iptables debugging « \1
Posted by jpluimers on 2017/11/28
Using the TRACE target: [WayBack] iptables debugging « \1 via [WayBack] iptables Debugging using the TRACE chain – Kristian Köhntopp – Google+
Docs:
TRACE
This target marks packes so that the kernel will log every rule which match the packets as those traverse the tables, chains,
rules. (The ipt_LOG or ip6t_LOG module is required for the logging.) The packets are logged with the string prefix: “TRACE:
tablename:chainname:type:rulenum ” where type can be “rule” for plain rule, “return” for implicit rule at the end of a user
defined chain and “policy” for the policy of the built in chains.
It can only be used in the raw table.
Way more details in the linked article.
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a comment