I have an update for my solution.
If you have a lot of connections - conntrack may stop logging.
Usually it gets error about not enough network...
What should I see in TCP dump?
Packets are not lost. They just don't applied to the rest of firewall rules.
And I have found a solutions using...
I have the following problem with iptables in Debian 6:
My server works as a router and it needs to log server external IP+port for all...
Separate names with a comma.