This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Has anyone been able to drop (and not log) IGMP?

I have a couple of firewalls that log every IGMP packet received. It would be nice to be able to stop it from being logged so I can see the real problems.

Anyone know how to do that? I have already tried specifying a network definition of 224.0.0.1, setup the rules, didn't work.

I think it is because it falls under PROTO 2, not TCP or UDP.

This thread was automatically locked due to age.

0 firebear_01 over 21 years ago in reply to SecApp

Cool it works.
Thanks from my logfiles to all helping brains.

by the way ASTARO-People could you take it into your firewall so we didn't do it after every new install ? please.

firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 ReD-MaN over 21 years ago in reply to firebear_01

What I have done is created a script file called igmp.sh and simple put this in it:

iptables -I AUTO_INPUT -p igmp -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT

That way it kills the IGMP logging on all interfaces.
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 21 years ago in reply to ReD-MaN

Hi redman,
if i understood right than the difference between your way and the way of the other solutions is that you allow and forward every IGMP Packet and this is not what i want to do.

firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 ReD-MaN over 21 years ago in reply to firebear_01

ACK! firebear you are right.. I didn't even notice my mistake there about the ACCEPT. I meant to have it DROP.
Cancel
Vote Up 0 Vote Down

Cancel