Page MenuHomeVyOS Platform

Firewall "log enable" logs every packet
Closed, ResolvedPublic


Setting "log enable" on a rule creates the following nftable entry (example)

log prefix "[ipv4-FWD-filter-116-D]" oifname @I_IG_home counter packets 0 bytes 0 drop comment "ipv4-FWD-filter-116"

nftable evaluates rules from left to right. This means that every packet that passes this entry will be logged, even when the rule is not applied.

The entry should be something like this (not tested)

oifname @I_IG_home log prefix "[ipv4-FWD-filter-116-D]" counter packets 0 bytes 0 drop comment "ipv4-FWD-filter-116"



Difficulty level
Unknown (require assessment)
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)