[Firehol-support] Too many log messages

Costa Tsaousis costa at tsaousis.gr
Fri Nov 11 23:04:06 GMT 2005


Richard Williams wrote:

> Hi
>
>  
>
> The users on the network I operate have Macintosh computers with one 
> of the applications being Microsoft Office 2004.  This constantly 
> pumps out packets on UDP 2222 and the packets contain details of the 
> license code in use.  Then if any other Macintosh running Office 2004 
> picks a packet with its license code, Office 2004 is closed down on 
> the second computer.  All this is to do with Microsoft stopping 
> illegal pirating and copying of its software.
>
>  
>
> However, the consequence for the server with Firehol running is that 
> the log is quickly filling up with messages like
>
>  
>
> Nov 11 09:40:33 server kernel: IN-dhcp:IN=eth0 OUT= 
> MAC=ff:ff:ff:ff:ff:ff:00:0d:93:b8:60:f8:08:00 SRC=10.6.18.36 
> DST=255.255.255.255 LEN=180 TOS=0x00 PREC=0x00 TTL=64 ID=46083 
> PROTO=UDP SPT=60344 DPT=2222 LEN=160
>
>  
>
> Does anyone have any ideas how I can stop these messages getting into 
> the log?
>

Define this that the top of firehol.conf:

server_office_ports="udp/2222"
client_office_ports="any"


In your dhcp interface, add this line:

server office drop



Costa





More information about the Firehol-support mailing list