On Thu, Jan 19, 2012 at 10:12:48AM +0100, Pablo Neira Ayuso wrote:I still think this can be useful.
But, why don't you add this to the LOG target as an extension instead
of yet another target?
By "extension", I meant to say "revision".
If you're not familiar with the iptables revision mechanism, for
instance, have a look at net/netfilter/xt_NFQUEUE.c
Look for the "revision" pattern in that code. Basicaly, it allows you
to enhance existing matches/targets without breaking backward
compatibility.