Logging Port Forwarding

Any logged entries will show up in logread.

I just tested the nftables log prefix myself using cake-qos-simple like so:

chain store-dscp-in-conntrack {
        ct mark set ip dscp or 128 log prefix "Try this: "
        ct mark set ip6 dscp or 128
}

and the associated logging works for me - see this logread snippet:

Tue Apr  9 15:42:01 2024 kern.warn kernel: [279178.808735] Try this: IN=br-lan OUT=wan MAC=xxx SRC=xxx DST=xxx LEN=611 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=TCP SPT=60908 DPT=443 WINDOW=4096 RES=0x00 ACK PSH URGP=0

Be careful about this feature since there is potential for some serious logread spam! I think this feature is mostly used for temporary debugging to check things are working properly (albeit there may also be some uses when permanently enabled logging is desired).