[Firehol-support] Log flood behind a bridge

Paul Roland paulrolandw at gmail.com
Wed Nov 15 20:45:26 GMT 2017


Hi everyone, great work with FireHOL so far.
I did install it as a virtualised router, however although I added server
anystateless nolog drop on all interfaces, I still get hundreds of these on
dmesg:

[ 1206.191088] firewall: IN-unknown:IN=eth0 OUT=
MAC=ff:ff:ff:ff:ff:ff:00:22:4d:7b:e0:6a:08:00 SRC=172.31.67.145
DST=255.255.255.255 LEN=160 TOS=0x00 PREC=0x00 TTL=128 ID=27101 PROTO=UDP
SPT=17500 DPT=17500 LEN=140

Seems like broadcast, but in-unknown is very weird since I have only ONE
interface, which is properly defined in interface section.
I believe these packets are coming from eth0 but bridge on host?
I might be wrong, how can I silence this please?


More information about the Firehol-support mailing list