• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1This target allows to create audit records for packets hitting the target.
2It can be used to record accepted, dropped, and rejected packets. See
3auditd(8) for additional details.
4.TP
5\fB\-\-type\fP {\fBaccept\fP|\fBdrop\fP|\fBreject\fP}
6Set type of audit record. Starting with linux-4.12, this option has no effect
7on generated audit messages anymore. It is still accepted by iptables for
8compatibility reasons, but ignored.
9.PP
10Example:
11.IP
12iptables \-N AUDIT_DROP
13.IP
14iptables \-A AUDIT_DROP \-j AUDIT
15.IP
16iptables \-A AUDIT_DROP \-j DROP
17