20

My router sends out multicast packets in regular intervals that are blocked by UFW's standard policies. These events are harmless but spam my syslogs and ufwlogs. I can't change the router's behaviour as that would require installing a modified firmware and thus void the warranty.

So my question is: Is there any way I can prevent UFW from logging this particular event without changing the blocking policies? And, as a possible follow-up: If I can't define a custom logging policy, would allowing this incoming traffic pose a possible security risk?

1 Answer 1

26
+50

Base on this answer from ServerFault,

ufw supports per rule logging. By default, no logging is performed when a packet matches a rule.

All you have to do is create a UFW deny rule to match those multicast packets.

2
  • 7
    Well, that was much easier than I thought it would be. Dropped a simple sudo ufw deny from SRC=192.168.178.1 to 224.0.0.1 and the log entries are gone. Thank you very much! Commented May 2, 2013 at 14:38
  • sudo ufw deny from 192.168.178.1 to 224.0.0.1 worked for me (ufw ver. 0.31.1-2)
    – Digger
    Commented Aug 7, 2018 at 22:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .