Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 477 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

more logging questions

William Warren
I have the following rules and defs in my astaro:
{ filter broadcast }   Any   DSL_Interface__   Drop     edit   del   move
3  { filter broadcast }  Any  Internal_Broadcast__  Drop  edit  del  move
4  Any  { netbios }  Internal_Interface__  Drop  edit  del  move
5  Any  { netbios }  DSL_Interface__  Drop  edit  del  move
6  { Private_Networks_-_RFC1918 }  Any  Any  Allow  edit  del  move


filter broadcast is the following:
internal_broadcast and a custom def of broadcast consisting of broadcast   255.255.255.255   255.255.255.255

Why is ASL still log dropping netbios even though i have it set to the interfaces which i have seen in the forums have to be pointed to for ASL to not log those drops?...specifically netbios broadcasts are being logged:
2003-Dec  5 00:01:11 host kernel: UDP Drop: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:04:61:47:22:7e:08:00 SRC=192.168.0.20 DST=192.168.0.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=34090 PROTO=UDP SPT=137 DPT=137 LEN=58 
2003-Dec  5 00:01:12 host kernel: UDP Drop: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:04:61:47:22:7e:08:00 SRC=192.168.0.20 DST=192.168.0.255 LEN=229 TOS=0x00 PREC=0x00 TTL=128 ID=34103 PROTO=UDP SPT=138 DPT=138 LEN=209 
2003-Dec  5 00:02:05 host kernel: UDP Drop: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:30:f1:03:40:98:08:00 SRC=192.168.0.23 DST=192.168.0.255 LEN=229 TOS=0x00 PREC=0x00 TTL=128 ID=51732 PROTO=UDP SPT=138 DPT=138 LEN=209 
 


This thread was automatically locked due to age.
Parents
  • 0
    Try changing your rules 4 and 5 to the network instead the interface! Note that you asked ASL to drop netbios to the interface itself, while your log refers to the broadcast addresses, in your case 192.168.0.255 and the DSL broadcast which is not visible in what you provided in the log.

    Regards
    Maurice  
Reply
  • 0
    Try changing your rules 4 and 5 to the network instead the interface! Note that you asked ASL to drop netbios to the interface itself, while your log refers to the broadcast addresses, in your case 192.168.0.255 and the DSL broadcast which is not visible in what you provided in the log.

    Regards
    Maurice  
Children