How can I add a rule in the packet filter that does not log at all? (in ASG v7.002)
My problem is that the Daily Executive Report every day show the same 8 hosts that cause the most dropped packets.
I want to set up my system in such a way that I can still drop those packets, but that those drops do not appear in the Daily Report.
In the Daily report I hope to se exceptions, not dailt returning hosts.
The checkbox 'Log traffic' in the rules is not checked, but still these drops are logged and used when creating the Daily Report.
To give an example:
My last rule is Any (source), Any (service) to Any (destination) drop
In the Daily Report the default GW of my ISP appears at no. 1 because every 2 minutes it broadcasts someting to 224.0.0.1.
These drops I don't want to see in the Daily Report. Every day it is the same.
I also have a lot of drops on dstport 135 from hosts in the same subnet that I don't want to see in the daily report.
Any help is welcome!
This thread was automatically locked due to age.
Guest User!
You are not Sophos Staff.
