Try moving the logging rule farther up in the firewall. Another rule ahead of it might be grabbing the packets before they get to your log rule. A good test would be to just do:
iptables -I INPUT -p icmp -j LOG
then just ping the box a few times. You should see messages appear in /var/log/messages. If not, take a look at /etc/syslog.conf and see where any kernel or .warning messages are being sent.
|