Skip to contentSkip to conversation

how to drop an log packets

DISCUSSION Ralph Blach 1 participant 1 message Oct 16, 2009

lore
Share & tools
lore
#0 lore raw

good evening,
I have a Linksys firewall that forwars all packets from port 22 to my linux server I want to log certain packets and drop certain subnets.

I currently have the following macro.

/sbin/iptables -N LOGDROP
/sbin/iptables -A LOGDROP -i wlan0 ! -s 10.0.0.2 -j LOG --log-level info
/sbin/iptables -A LOGDROP -j DROP
/sbin/iptables -A INPUT -i wlan0 -s 58.102.198.29/255.255.255.0 -j LOGDROP

What I really wan to do is log address and excluding certain subnets, and address, but drop others on offending networks. So I want to log addresses to wlan0 whose source address is not 10.0.0.2, but drop subnets which I exclude.

What is the best way to do this

Thanks

Chip