iptables - logging

$ sudo gedit /etc/rsyslog.d/50-default.conf
:msg,contains,"iptables " /var/log/iptables.log

$ sudo service rsyslog restart

$ grep "iptables" /var/log/iptables.log

--------

$ gedit /etc/iptables.up.rules
-A INPUT -p icmp -j LOG --log-prefix "iptables PING DROPPED: "
-A INPUT -p icmp -j DROP