I've got a few firewalls that I don't personally manage sending junk syslog messages through my ubuntu machine (which acts as a software router). Is there an easy way for me to block forwarding a particular syslog message (by some text) like I would with with rsyslog or syslog-ng rules using iptables.

  • Not with stock iptables, as it only works on layer 3 and doesn't do deep packet inspection. – jordanm Nov 8 '19 at 21:06

You could write something horrible with -m u32 --u32 to do this, but iptables really isn't meant to operate at this level, so it'd be really ugly, and probably inefficient and/or unreliable too.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.