Skip to content

Instantly share code, notes, and snippets.

@cjac

cjac/nflog.rules

Created June 4, 2018 20:09
Show Gist options
  • Save cjac/fa39fd167978d7e0e8cb32df43852d46 to your computer and use it in GitHub Desktop.
Save cjac/fa39fd167978d7e0e8cb32df43852d46 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
nflog.rules
root@build0:~# iptables-save | grep nflog
-A PREROUTING -m policy --dir in --pol ipsec -j NFLOG --nflog-group 5
-A POSTROUTING -m policy --dir out --pol ipsec -j NFLOG --nflog-group 5
-A INPUT -m addrtype ! --dst-type LOCAL -m policy --dir in --pol ipsec -j NFLOG --nflog-group 5
-A INPUT -m addrtype --dst-type LOCAL -m policy --dir in --pol ipsec -j NFLOG --nflog-group 5
-A INPUT -p udp -m multiport --dports 500,4500 -j NFLOG --nflog-group 5
-A INPUT -p ah -j NFLOG --nflog-group 5
-A INPUT -p esp -j NFLOG --nflog-group 5
-A OUTPUT -m policy --dir out --pol ipsec -j NFLOG --nflog-group 5
-A OUTPUT -p udp -m multiport --dports 500,4500 -j NFLOG --nflog-group 5
-A OUTPUT -p ah -j NFLOG --nflog-group 5
-A OUTPUT -p esp -j NFLOG --nflog-group 5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment