NFCT writing localhost conntrack entries too

2 messages, 1 author, 2017-08-30 · open the first message on its own page

NFCT writing localhost conntrack entries too

From: Akshat Kakkar <hidden>
Date: 2017-08-29 10:23:29 

With ulog/nflog, NFCT plugin, is it possible to not log entries with src ip
as 127.0.0.1

I can see following options in ulogd.conf
#accept_src_filter=192.168.1.0/24,1:2::/64 # source ip of connection
must belong to these networks
#accept_dst_filter=192.168.1.0/24 # destination ip of connection must
belong to these networks
#accept_proto_filter=tcp,sctp # layer 4 proto of connections


... but what I am looking for is like deny_src_filter.

Is it possible?

Re: NFCT writing localhost conntrack entries too

From: Akshat Kakkar <hidden>
Date: 2017-08-30 07:57:35 

Anybody ?

On Tue, Aug 29, 2017 at 3:53 PM, Akshat Kakkar [off-list ref] wrote:
With ulog/nflog, NFCT plugin, is it possible to not log entries with src ip
as 127.0.0.1

I can see following options in ulogd.conf
#accept_src_filter=192.168.1.0/24,1:2::/64 # source ip of connection
must belong to these networks
#accept_dst_filter=192.168.1.0/24 # destination ip of connection must
belong to these networks
#accept_proto_filter=tcp,sctp # layer 4 proto of connections


... but what I am looking for is like deny_src_filter.

Is it possible?
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help