iptables-debug.sh

#!/bin/bash
## iptables-debug.sh
##
## @author gdm85
##
## debug some iptables traffic
#

IPT=/sbin/iptables

## you can use multiple ports to be ignored
IGNORE_PORTS=22

set -e

$IPT -t nat -I PREROUTING -m multiport ! --dports $IGNORE_PORTS -j LOG --log-prefix "iptables debug PREROUTING: " --log-level 6
$IPT -I INPUT -p tcp -m multiport ! --dports $IGNORE_PORTS -j LOG --log-prefix "iptables debug INPUT: " --log-level 6
$IPT -I FORWARD -p tcp -m multiport ! --dports $IGNORE_PORTS -j LOG --log-prefix "iptables debug FORWARD: " --log-level 6
$IPT -t nat -I DOCKER -m limit --limit 5/min ! --dports $IGNORE_PORTS  -j LOG --log-prefix "iptables debug DOCKER: " --log-level 6