Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 982 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall log filling up with dropped packets from AP

Jeff x
I have many log entires like below:
 
---
[SIZE=2]2013:07:04-03:19:47 sophos ulogd[4432]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" srcmac="0:24[:D]5[:D]8:2w[:D]4" dstmac="b4:f5:2f:99:40:b7" srcip="192.168.1.12" dstip="192.168.0.1" proto="1" length="356" tos="0x10" prec="0xc0" ttl="64" type="3" code="3" 

---
 
192.168.0.10 is a wireless access point. I have only one subnet and DHCP is handled by Sophos.
 
According to some old posts in the forum, this is harmless? What would be the rule and where does it go to eliminate these log entries? There are a ton of them. I guess a better question would be should the AP even be causing this to happen?[/SIZE]


This thread was automatically locked due to age.
  • 0
    The IPs in the log line are .0.1 and .1.12.  What are those?  What do you mean when you say you have only one subnet - what is it?

    Cheers - Bob

    Sorry for any short responses.  Posted from my iPhone.
  • 0
    protocol 1 is ICMP.

    How do you have the ICMP settings configured on the firewall?

    As Bob points out, your IPs seem inconsistent; 3 IPs are mentioned on what looks like 2 networks.

    Barry