blob: 2bc2543828ae7c61b93717d74f4e2133e698ce72 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
*ip;test-ip4
*ip6;test-ip6
*inet;test-inet
- *arp;test-arp
- *bridge;test-bridge
:output;type filter hook output priority 0
ct direction original log;ok
log;ok
log level emerg;ok
log level alert;ok
log level crit;ok
log level err;ok
log level warn;ok;log
log level notice;ok
log level info;ok
log level debug;ok
log level emerg group 2;fail
log level alert group 2 prefix "log test2";fail
udp dport 200 log prefix aaaaa-aaaaaa group 2 snaplen 33;ok;udp dport 200 log prefix "aaaaa-aaaaaa" group 2 snaplen 33
# TODO: Add an exception: 'queue-threshold' attribute needs 'group' attribute
# The correct rule is log group 2 queue-threshold 2
log group 2 queue-threshold 2;ok
log group 2 snaplen 33;ok
tcp dport 300 log group 2 prefix \"IPTABLES-NFT SSH\";ok;tcp dport 300 log prefix "IPTABLES-NFT SSH" group 2
|
