I have a policy to drop packets in the input chain

        chain input {
                type filter hook input priority 0; policy drop;

How can I log just these dropped packets?


The rules seem to be acted on in order. Policy is drop; then you have whatever accept rules you need. Now simply having


on a line by itself at the end does the trick.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.