Hi together, I think I have solved the problem. The solution is to set the flush rules for each chain iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP iptables -F INPUT iptables -F OUTPUT iptables -F FORWARD iptables -t nat -F iptables -X But now all dropped packets will be logged on console. Does somebody have an idea ? Thanks for help Stefan