This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Not logging dropped IGMP Packets in ASL5 ?

Does anyone know if ASL5 now supports not logging dropped IGMP Broadcast Packets (Protocol 2) dest 224.0.0.1 via the Web Interface, without having to edit iptables at console level, like we had to in version 4. I had hoped Astaro would have added this much requested feature in the new version.

This thread was automatically locked due to age.

Parents

0 Xeno over 21 years ago

It is still not possible to address IGMP via Webadmin.

Xeno
Cancel
Vote Up 0 Vote Down

Cancel
0 zenanzus over 21 years ago in reply to Xeno

Yeh, it appears that way. Even creating a service with IP protocol 2 and dropping it doesn't stop logging
Can anyone give me brief instructions how to do it from console in ASL5. Many Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 oliver.desch over 21 years ago in reply to zenanzus
Go to Definitions/Network -> New Definition -> Protocol -> IP -> enter 2 for IGMP [:)]

After you have defined the new service goto packet filter and add for example

Code:
'Any Any IGMP Drop' and 'Any Interfaces_of_firewall IGMP Drop'

read u
o|iver
Cancel
Vote Up 0 Vote Down

Cancel
0 zenanzus over 21 years ago in reply to oliver.desch

Thanks Oliver, but already tried that, still doesn't stop the dropped packets from being logged.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mike_H over 21 years ago in reply to zenanzus

having same issue. when u say ip protocal 2 what do u mean. sorry having a dumb day...
Cancel
Vote Up 0 Vote Down

Cancel
0 FN-Eagle over 21 years ago in reply to oliver.desch

Oliver,

Could you please explain it a little bit more detailed. I have the same problem on my box running 5.009. I created a new service with protocol IP and protocol number 2 and called it IGMP.

Why do I need a rule to block this traffic? The traffic is already blocked; I just don’t want to log it all the time. I’m getting at least 20 of these entries every minute. [:S] Thanks.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 FN-Eagle over 21 years ago in reply to oliver.desch

Oliver,

Could you please explain it a little bit more detailed. I have the same problem on my box running 5.009. I created a new service with protocol IP and protocol number 2 and called it IGMP.

Why do I need a rule to block this traffic? The traffic is already blocked; I just don’t want to log it all the time. I’m getting at least 20 of these entries every minute. [:S] Thanks.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data