search

mikemol / fireholv6

Firehol firewall with patches for IPv6 support
http://sourceforge.net/mailarchive/message.php?msg_id=27014139
GNU General Public License v2.0
5 stars 1 forks source link

drop/reject without logging #3

Open mikemol opened 12 years ago

mikemol commented 12 years ago

Some drops/rejects just come down to noise, such as rejecting random dhcp client broadcasts received by a cable modem, or blocking IPP or mdns broadcasts from exiting a router on a wan interface. Once identified as harmless, it would be preferential to simply drop it, without logging!

It would be convenient to have helper targets for dropping and rejecting that don't log.

philwhineray commented 12 years ago

I'm fairly sure you can write:

server protocol_x reject server protocol_y drop

and it won't log unless you explicitly ask it to. Logging is default only when no rules have been matched.

Is that what you're after? Or do you mean an explicit: server harmless drop helper?