Blame extensions/libxt_AUDIT.man
|
Packit Service |
d1fe03 |
This target allows to create audit records for packets hitting the target.
|
|
Packit Service |
d1fe03 |
It can be used to record accepted, dropped, and rejected packets. See
|
|
Packit Service |
d1fe03 |
auditd(8) for additional details.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-type\fP {\fBaccept\fP|\fBdrop\fP|\fBreject\fP}
|
|
Packit Service |
d1fe03 |
Set type of audit record. Starting with linux-4.12, this option has no effect
|
|
Packit Service |
d1fe03 |
on generated audit messages anymore. It is still accepted by iptables for
|
|
Packit Service |
d1fe03 |
compatibility reasons, but ignored.
|
|
Packit Service |
d1fe03 |
.PP
|
|
Packit Service |
d1fe03 |
Example:
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
iptables \-N AUDIT_DROP
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
iptables \-A AUDIT_DROP \-j AUDIT
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
iptables \-A AUDIT_DROP \-j DROP
|