* NFCT writing localhost conntrack entries too
@ 2017-08-29 10:23 Akshat Kakkar
2017-08-30 7:57 ` Akshat Kakkar
0 siblings, 1 reply; 5+ messages in thread
From: Akshat Kakkar @ 2017-08-29 10:23 UTC (permalink / raw)
To: netdev
With ulog/nflog, NFCT plugin, is it possible to not log entries with src ip
as 127.0.0.1
I can see following options in ulogd.conf
#accept_src_filter=192.168.1.0/24,1:2::/64 # source ip of connection
must belong to these networks
#accept_dst_filter=192.168.1.0/24 # destination ip of connection must
belong to these networks
#accept_proto_filter=tcp,sctp # layer 4 proto of connections
... but what I am looking for is like deny_src_filter.
Is it possible?
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: NFCT writing localhost conntrack entries too
2017-08-29 10:23 NFCT writing localhost conntrack entries too Akshat Kakkar
@ 2017-08-30 7:57 ` Akshat Kakkar
0 siblings, 0 replies; 5+ messages in thread
From: Akshat Kakkar @ 2017-08-30 7:57 UTC (permalink / raw)
To: netdev
Anybody ?
On Tue, Aug 29, 2017 at 3:53 PM, Akshat Kakkar <akshat.1984@gmail.com> wrote:
> With ulog/nflog, NFCT plugin, is it possible to not log entries with src ip
> as 127.0.0.1
>
> I can see following options in ulogd.conf
> #accept_src_filter=192.168.1.0/24,1:2::/64 # source ip of connection
> must belong to these networks
> #accept_dst_filter=192.168.1.0/24 # destination ip of connection must
> belong to these networks
> #accept_proto_filter=tcp,sctp # layer 4 proto of connections
>
>
> ... but what I am looking for is like deny_src_filter.
>
> Is it possible?
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: NFCT writing localhost conntrack entries too
2017-08-30 17:40 ` Akshat Kakkar
@ 2017-08-31 18:39 ` Akshat Kakkar
0 siblings, 0 replies; 5+ messages in thread
From: Akshat Kakkar @ 2017-08-31 18:39 UTC (permalink / raw)
To: netfilter
Please guide .... Anybody, somebody !!!
On 8/30/17, Akshat Kakkar <akshat.1984@gmail.com> wrote:
> Anybody? Please help ...
>
> On 8/24/17, Akshat Kakkar <akshat.1984@gmail.com> wrote:
>> With ulog, NFCT plugin, is it possible to not log entries with src ip
>> as 127.0.0.1
>>
>> I can see following options in ulogd.conf
>> #accept_src_filter=192.168.1.0/24,1:2::/64 # source ip of connection
>> must belong to these networks
>> #accept_dst_filter=192.168.1.0/24 # destination ip of connection must
>> belong to these networks
>> #accept_proto_filter=tcp,sctp # layer 4 proto of connections
>>
>>
>> ... but what I am looking for is like deny_src_filter.
>>
>> Is it possible?
>>
>
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: NFCT writing localhost conntrack entries too
2017-08-24 13:10 Akshat Kakkar
@ 2017-08-30 17:40 ` Akshat Kakkar
2017-08-31 18:39 ` Akshat Kakkar
0 siblings, 1 reply; 5+ messages in thread
From: Akshat Kakkar @ 2017-08-30 17:40 UTC (permalink / raw)
To: netfilter
Anybody? Please help ...
On 8/24/17, Akshat Kakkar <akshat.1984@gmail.com> wrote:
> With ulog, NFCT plugin, is it possible to not log entries with src ip
> as 127.0.0.1
>
> I can see following options in ulogd.conf
> #accept_src_filter=192.168.1.0/24,1:2::/64 # source ip of connection
> must belong to these networks
> #accept_dst_filter=192.168.1.0/24 # destination ip of connection must
> belong to these networks
> #accept_proto_filter=tcp,sctp # layer 4 proto of connections
>
>
> ... but what I am looking for is like deny_src_filter.
>
> Is it possible?
>
^ permalink raw reply [flat|nested] 5+ messages in thread
* NFCT writing localhost conntrack entries too
@ 2017-08-24 13:10 Akshat Kakkar
2017-08-30 17:40 ` Akshat Kakkar
0 siblings, 1 reply; 5+ messages in thread
From: Akshat Kakkar @ 2017-08-24 13:10 UTC (permalink / raw)
To: netfilter
With ulog, NFCT plugin, is it possible to not log entries with src ip
as 127.0.0.1
I can see following options in ulogd.conf
#accept_src_filter=192.168.1.0/24,1:2::/64 # source ip of connection
must belong to these networks
#accept_dst_filter=192.168.1.0/24 # destination ip of connection must
belong to these networks
#accept_proto_filter=tcp,sctp # layer 4 proto of connections
... but what I am looking for is like deny_src_filter.
Is it possible?
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2017-08-31 18:39 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-08-29 10:23 NFCT writing localhost conntrack entries too Akshat Kakkar
2017-08-30 7:57 ` Akshat Kakkar
-- strict thread matches above, loose matches on Subject: below --
2017-08-24 13:10 Akshat Kakkar
2017-08-30 17:40 ` Akshat Kakkar
2017-08-31 18:39 ` Akshat Kakkar
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.