I am trying to make
rsyslog to log messages from
MASQUERADE. I have
LOG rule in
nat table and
PREROUTING chain before the MASQUERADE rules.
iptables -t nat -A POSTROUTING -s 10.0.1.0/24 ! -d 10.0.1.0/24 -j LOG --log-prefix "FireWallFW: " iptables -t nat -A POSTROUTING -s 10.0.1.0/24 ! -d 10.0.1.0/24 -j MASQUERADE
When I send 100 new packages through the MASQUERADE, iptables counters indicate the 100 packages were matched by both the MASQUERADE as well as by the LOG rules. Unfortunately
rsyslog puts in logfile a dozen or at most about 30 messages losing information about real count of masqueraded packages. It does not matter if I have sync enabled or disabled on the logfile or if
RepeatedMsgReduction is on or of.
What is going on here? Is
rsyslog to slow or am I overlooking something?