Re: [PATCH v3 1/1] netfilter: load nf_log_syslog on enabling nf_conntrack_log_invalid
From: Pablo Neira Ayuso
Date: Mon Jul 28 2025 - 20:55:27 EST
On Mon, Jul 28, 2025 at 06:25:14PM +0800, Lance Yang wrote:
> From: Lance Yang <lance.yang@xxxxxxxxx>
>
> When no logger is registered, nf_conntrack_log_invalid fails to log invalid
> packets, leaving users unaware of actual invalid traffic. Improve this by
> loading nf_log_syslog, similar to how 'iptables -I FORWARD 1 -m conntrack
> --ctstate INVALID -j LOG' triggers it.
JFYI: I ended up taking v2 into nf-next, let me know if there is any
issue with your previous version, thanks.