* change --log-level to "err"

[lab.git] / iptables / ufw / after.rules

diff --git a/iptables/ufw/after.rules b/iptables/ufw/after.rules
index 70b5624..37fc6e7 100644 (file)
--- a/iptables/ufw/after.rules
+++ b/iptables/ufw/after.rules
@@ -24,8 +24,8 @@
 -A ufw-after-input -p udp --dport 68 -j RETURN
 
 # catchall for logging
--A ufw-after-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK INPUT]: "
--A ufw-after-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK FORWARD]: "
+-A ufw-after-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK INPUT]: " --log-level err
+-A ufw-after-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK FORWARD]: " --log-level err
 
 # don't delete the 'COMMIT' line or these rules won't be processed
 COMMIT