Différences

Ci-dessous, les différences entre deux révisions de la page.

--- tech:notes_iptables [2026/04/16 15:05] – Jean-Baptiste
+++ tech:notes_iptables [2026/04/17 11:00] (Version actuelle) – Jean-Baptiste
@@ Ligne 53: / Ligne 53: @@
+## Logs
+~~~bash
+iptables -A INPUT -p igmp -j LOG --log-level info --log-prefix "IGMP:"
+# log pour paquets refusés
+iptables -N LOGDROP
+iptables -A LOGDROP -m limit --limit 5/second  -j LOG --log-level notice --log-ip-options --log-prefix "Netfilter refused:"
+iptables -A LOGDROP -j DROP
+# iptables -A pub-priv -m limit --limit 5/second  -j LOG --log-level notice --log-ip-options --log-prefix "Netfilter pub-priv:"
+iptables -A FORWARD -j LOGDROP
+iptables -A INPUT -j LOGDROP
+iptables -A INPUT -p icmp -m limit -j LOG --log-prefix "ICMP/IN: "
+iptables -A OUTPUT -p icmp -m limit -j LOG --log-prefix "ICMP/OUT: "
+iptables -A FORWARD -p icmp -m limit -j LOG --log-prefix "ICMP/FWD: "
+~~~