Re: iptables: are DROP and LOG order sensitive
Anthony Ewell wrote:
> Hi All,
>
> Are these two comand order sensitive?
>
> iptables -A dsl-in -j DROP
> iptables -A dsl-in -j LOG --log-level debug --log-prefix "yada ... "
Once you DROP a packet, it's dead and gone. It'll never make it to the
LOG rule.
|