Is any body so kind to teach me how to trace the error of the iptables.

Thank you !

I recently start to set up my fire-wall.
firstly I set all tables' (including: nat, mangle, filter) "--policy" to drop all input, output, forwarding.
and than I add to more entry. The content is something like that :
#iptables -A INPUT -i eth0 -p icmp --icmp-type --echo-request -s 192.168.X.X -j ACCEPT.
#iptables -A OUPUT -o eth0 -p icmp --icmp-type --echo-reply -d 192.168x.x -j ACCEPT.

after that I :#ping XXX.XXX.XXX.XXX
the system return the an error message .
" ping : sendmsg not permitted. "

At this stage, I have two questions.
The first one:
how can I check any log for debug.

The second thing is :
according to my learning materials, I had open the required channels for the "ping" program to work. why I got the above respone.

Please tell me, why !

Thank you !

You are only letting pings in... and replies to it out.
You need to allow ping out and replies in, for example

Thank you for your kindness

I am sorry to tell you that I have something to mistype. The ERROR message should be :
Ping :sendsmg : Operation not permitted

On the other hand, my command should be :
#iptabels -A OUTPUT -o eth0 -p icmp -s 192.168.X.X --icmp-type echo-request -j ACCEPT
#iptables -A INPUT -i eth0 -p icmp --icmp-type echo-reply -d 192.168.X.X -j ACCEPT

And after I add -t filter before -A, the error message is the same.

I tried to consult the problem with some friends. They considered that the problem is due to the activating of SELinux option when I install the Fedora Core 2. If that the reason how can I disable this SELinux ?