iptables -t skfilter -F iptables -t skfilter -A SOCKET -m owner --ctx-owner system_u:system_r:httpd_t -j LOG --log-context --log-prefix="ctxmatch: " iptables -t skfilter -A OUTPUT -m owner --ctx-owner system_u:system_r:httpd_t -j LOG --log-context --log-prefix="ctxmatch: " iptables -t skfilter -L iptables-save