Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 2 subscribers
  • Views 13841 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disable firewall logging for certain hosts/networks?

dmitripr

Hi All,

Is it possible to disable firewall logging for some specific hosts or networks? I have some hosts that are trying to connect to external ports that I'm blocking (Honeywell services), and that's generating a lot of logging. I would like to not log that traffic. 

Thanks!



This thread was automatically locked due to age.
Parents
  • 0
    If you are seeing default drop entries for those hosts in the packetfilter.log you can create an explicit rule to drop that traffic.

    Specific Host(s) >> Honeywell Port(s) >> Internet IPv4 :: DROP (no logging)

    As long as you do not enable logging on that rule you shouldn't see any entries in the packetfilter.log.

    You should always check the positioning of a deny rule as it will short-circuit any subsequent allow rules.

    If you have a general rule with a drop for those ports and logging enabled then place the specific rule above it. The traffic matching the specific rule will get dropped un-logged and non matching traffic on those ports will show up in the logs.
Reply
  • 0
    If you are seeing default drop entries for those hosts in the packetfilter.log you can create an explicit rule to drop that traffic.

    Specific Host(s) >> Honeywell Port(s) >> Internet IPv4 :: DROP (no logging)

    As long as you do not enable logging on that rule you shouldn't see any entries in the packetfilter.log.

    You should always check the positioning of a deny rule as it will short-circuit any subsequent allow rules.

    If you have a general rule with a drop for those ports and logging enabled then place the specific rule above it. The traffic matching the specific rule will get dropped un-logged and non matching traffic on those ports will show up in the logs.
Children