monitor firewall name <name>
does not monitor any firewall-log-entry.
If we look at /var/log/messages we can confirm that new firewall log entries are just arriving....
If we use
monitor log
we can read live monitor and all is OK (except that this is an all-log monitor).
But instead, I repeat, if we use
monitor firewall name <name>
nothing happens.
On which version was this experienced? Cannot reproduce on 1.1.6, 1.1.7 and 1.2. Could you provide the output of sudo iptables-save? Or sudo iptables -t filter -L -nv (includes packet counters and should show you why your traffic is not hitting your log-rule).
One possible point of possible confusion I found is that ingressing local-destined traffic is not contained in 'interface <> firewall in' but 'interface <> firewall local' (as expected, if you know it exists).
On 1.2 I do receive https://debbugs.gnu.org/db/11/11823.html but I'm assuming we should kick core-utils version forward to resolve.