Problems with syslog and iptables

[Filozoff]

Hi,

I want iptables to log information to syslog.
This is my syslog.conf file:
kern.* /logs/iptables

I added rule to iptables:
iptables -A FORWARD -j LOG

But /logs/iptables is empty.
I tried to test it with logger:
logger -p kern.warn "test"
But nothing happened.

I tried to use mail.* /logs/iptables in syslog.conf and then test it with logger:
logger -p mail.info "test", and it worked!

Why doesn't syslog want to log from the kern facility?

Please help.

[markkuk]

"iptables -A" adds the rule to the end of the rule chain. If previous rules handle all packets, nothing reaches your log rule. Check your whole rule set.