On Sat, Oct 10, 2015 at 8:26 PM, Tom Eastep <[email protected]> wrote:
> Swall:+lan-net:ACCEPT:IN=eth1 OUT=eth0 SRC=192.168.0.1 DST=zz.zz.zz.zz > > PROTO=ICMP TYPE=3 CODE=3 [SRC=zz.zz.zz.zz DST=192.168.0.1 PROTO=UDP > > SPT=10760 DPT=25565 ] > > > > zz.zz.zz.zz is a random public internet IP. And I have dozens of > > messages like this. > > > > I want to not log them while preserving my usual log to spot other > > activities without being flooded by these useless messages. > > > > Any suggestion? > > I solve this by adding this rule in the RELATED section: > > ACCEPT all all icmp > Excellent! I've tweaked a bit to be ultra selective but I get the idea. Thank you! > -- ObNox
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
