---
name: "iptables2dlf"
section: "1"
platform: "linux"
package: "lire"
version: "20020214-7"
release: "Debian 3.0 (Woody)"
platforms: ["linux"]
url: "https://new.carta.tech/iptables2dlf"
---

# iptables2dlf(1)

convert IP Tables syslog logs to firewall DLF

## NAME

iptables2dlf - convert IP Tables syslog logs to firewall DLF

## SYNOPSIS

**iptables2dlf** *file*

## DESCRIPTION

**iptables2dlf** converts Linux 2.4 packet log into firewall DLF format.

## LIMITATIONS

The netfilter logging modules doesn't log the status of the packet (drop, accept, reject) like the ipchains logging code. You can specify a prefix that will be used in the log. This converter will marks the packet as 'denied' whenever that prefix match (case insensitive) the following regex: 'denied⎪deny⎪drop⎪reject', other packets will have '-' as the value of the 'action' field.

So in order for that converter to detect 'denied' packets, you should use prefix containing one of those substrings.

For example:

iptables -N lodrop iptables -A logdrop -j LOG --log-prefix "Packet-DENY: " iptables -A logdrop -j DROP

or other similar prefixes: 'denied: ', 'Packet-REJECT: ', ...

The prefix used will ends up in the 'rule' field of the DLF record.

## SEE ALSO

The Netfilter webpage at http://netfilter.samba.org/ .

## AUTHORS

Francis J. Lacoste \<flacoste@logreport.org\>

## VERSION

$Id: iptables2dlf.in,v 1.2 2002/01/22 23:38:49 flacoste Exp $

## COPYRIGHT

Copyright (C) 2001 Stichting LogReport Foundation LogReport@LogReport.org

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with http://www.gnu.org/copyleft/gpl.html or write to the Free Software  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111, USA.