Red Hat Networking - IPtables not logging nonlocal packets

Author

IPtables not logging nonlocal packets

joespoolhall@gmail.com

2006-05-16, 7:15 pm

I've set up iptables to log via the following commands:

iptables -A INPUT -s w.x.y.z/24 -j ACCEPT
iptables -A INPUT -m limit --limit 1000/minute -j LOG --log-prefix "FW:
"
iptables -P INPUT DROP

So, basically I would expect log then drop anything not coming from the
w.x.y.z/24 subnet. Still, the only thing that gets logged are packets
destined for a local interface address. I've tried forcing the NIC to
promiscuous mode and enabling IP routing, but neither gives the desired
result. I literally want to log EVERY packet not sourced from
w.x.y.z/24. Is there something I'm missing?

Thanks in advance,

-JPH