Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ssh wan block bug

    Scheduled Pinned Locked Moved
    Firewalling
    4
    25
    882
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      techpro2004
      last edited by

      I also have a lot of these.

      May 13 11:17:30 miniupnpd 16935 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists

      not sure how to stop them either.

      S 1 Reply Last reply Reply Quote 0
      • S
        SteveITS Rebel Alliance @techpro2004
        last edited by

        @techpro2004 It's not every log file, it just has to be one of them. For instance leaving the dashboard up with a lot of widgets that update.

        The miniupnpd error I think I saw posted here recently.

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        1 Reply Last reply Reply Quote 0
        • T
          techpro2004
          last edited by

          I do not have a lot of widgets or leave the web ui open.

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Rebel Alliance @techpro2004
            last edited by

            @techpro2004 OK but we don't know which log file it is either. :) Try "ls -l /var/log/" and see if any have really close timestamps.

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            1 Reply Last reply Reply Quote 0
            • T
              techpro2004
              last edited by

              output below

              total 186301
              -rw------- 1 root wheel 361679 May 13 13:10 auth.log
              -rw------- 1 root wheel 511143 May 9 16:01 auth.log.0
              -rw------- 1 root wheel 511160 May 4 12:14 auth.log.1
              -rw------- 1 root wheel 511116 Apr 29 02:03 auth.log.2
              -rw------- 1 root wheel 511163 Apr 17 21:39 auth.log.3
              -rw-r--r-- 1 root wheel 35193 Aug 9 2023 bsdinstall_log
              drwxr-xr-x 2 clamav clamav 4 Apr 24 16:54 c-icap
              drwxr-xr-x 2 clamav clamav 5 Sep 30 2023 clamav
              -rw------- 1 root wheel 31264 May 13 13:10 dhcpd.log
              -rw------- 1 root wheel 532574 May 13 12:48 dhcpd.log.0
              -rw------- 1 root wheel 512127 May 12 18:40 dhcpd.log.1
              -rw------- 1 root wheel 513660 May 12 00:47 dhcpd.log.2
              -rw------- 1 root wheel 525924 May 11 20:12 dhcpd.log.3
              -rw------- 1 root wheel 600929 May 11 18:08 dhcpd.log.4
              -rw------- 1 root wheel 512803 May 11 10:40 dhcpd.log.5
              -rw------- 1 root wheel 551188 May 11 03:39 dhcpd.log.6
              -rw-r--r-- 1 root wheel 12760 May 11 20:11 dmesg.boot
              -rw------- 1 root wheel 117458457 May 13 13:11 filter.log
              -rw------- 1 root wheel 114864576 May 13 13:09 filter.log.0
              -rw------- 1 root wheel 117943166 May 13 13:06 filter.log.1
              -rw------- 1 root wheel 126299122 May 13 13:03 filter.log.2
              -rw------- 1 root wheel 119374123 May 13 13:00 filter.log.3
              -rw------- 1 root wheel 122887130 May 13 12:57 filter.log.4
              -rw------- 1 root wheel 123248464 May 13 12:54 filter.log.5
              -rw------- 1 root wheel 124701905 May 13 12:51 filter.log.6
              -rw------- 1 root wheel 4195 May 11 20:11 gateways.log
              -rw------- 1 root wheel 0 Aug 9 2023 haproxy.log
              -rw------- 1 root wheel 0 May 11 20:11 ipsec.log
              -rw------- 1 root wheel 0 May 11 20:11 l2tps.log
              -rw-r--r-- 1 root wheel 0 Aug 9 2023 lastlog
              drwx------ 2 www www 2 Apr 23 11:42 lighttpd
              drwxr-xr-x 2 root wheel 3 Aug 9 2023 nginx
              -rw------- 1 root wheel 373815 May 13 13:11 nginx.log
              -rw------- 1 root wheel 511909 May 5 20:20 nginx.log.0
              -rw------- 1 root wheel 513445 Apr 14 21:26 nginx.log.1
              -rw------- 1 root wheel 515809 Jan 13 15:12 nginx.log.2
              -rw------- 1 root wheel 518316 Dec 9 13:39 nginx.log.3
              -rw------- 1 root wheel 514855 Nov 13 19:45 nginx.log.4
              -rw------- 1 root wheel 511179 Oct 31 2023 nginx.log.5
              -rw------- 1 root wheel 511683 Oct 25 2023 nginx.log.6
              drwxr-xr-x 2 root wheel 2 Aug 9 2023 ntp
              -rw------- 1 root wheel 498009 May 13 12:48 ntpd.log
              -rw------- 1 root wheel 424405 May 13 12:48 openvpn.log
              -rw------- 1 root wheel 514677 May 3 17:51 openvpn.log.0
              -rw------- 1 root wheel 515736 Apr 14 21:14 openvpn.log.1
              -rw------- 1 root wheel 519574 Mar 28 09:20 openvpn.log.2
              -rw------- 1 root wheel 543139 Mar 12 16:05 openvpn.log.3
              -rw------- 1 root wheel 512035 Feb 25 08:39 openvpn.log.4
              -rw------- 1 root wheel 516006 Feb 8 00:21 openvpn.log.5
              -rw------- 1 root wheel 512844 Jan 25 06:57 openvpn.log.6
              drwxr-xr-x 2 unbound unbound 11 May 13 11:03 pfblockerng
              -rw------- 1 root wheel 0 May 11 20:11 poes.log
              -rw------- 1 root wheel 0 May 11 20:11 portalauth.log
              -rw------- 1 root wheel 0 May 11 20:11 ppp.log
              -rw------- 1 root wheel 103242 May 13 12:48 resolver.log
              -rw------- 1 root wheel 513046 May 12 10:20 resolver.log.0
              -rw------- 1 root wheel 553198 May 11 18:07 resolver.log.1
              -rw------- 1 root wheel 520526 May 9 00:01 resolver.log.2
              -rw------- 1 root wheel 513547 May 5 20:17 resolver.log.3
              -rw------- 1 root wheel 538213 Apr 30 00:01 resolver.log.4
              -rw------- 1 root wheel 517906 Apr 21 00:01 resolver.log.5
              -rw------- 1 root wheel 520503 Apr 14 21:36 resolver.log.6
              -rw------- 1 root wheel 420794 May 13 13:11 routing.log
              -rw------- 1 root wheel 511585 May 12 20:36 routing.log.0
              -rw------- 1 root wheel 511727 May 12 00:23 routing.log.1
              -rw------- 1 root wheel 511438 May 11 04:48 routing.log.2
              -rw------- 1 root wheel 511301 May 10 14:49 routing.log.3
              -rw------- 1 root wheel 511427 May 9 17:45 routing.log.4
              -rw------- 1 root wheel 511201 May 8 20:59 routing.log.5
              -rw------- 1 root wheel 511650 May 8 00:47 routing.log.6
              drwxr-x--- 2 squid squid 2 Dec 8 12:00 squid
              -rw------- 1 root wheel 499970 May 13 13:10 system.log
              -rw------- 1 root wheel 511110 May 11 17:43 system.log.0
              -rw------- 1 root wheel 511097 May 8 21:12 system.log.1
              -rw------- 1 root wheel 524351 May 5 20:28 system.log.2
              -rw------- 1 root wheel 538069 May 3 17:41 system.log.3
              -rw------- 1 root wheel 511115 Apr 29 04:47 system.log.4
              -rw------- 1 root wheel 511124 Apr 25 05:23 system.log.5
              -rw------- 1 root wheel 520145 Apr 16 12:59 system.log.6
              -rw------- 1 root wheel 62742 May 11 20:11 userlog
              -rw-r--r-- 1 root wheel 394 May 11 20:11 utx.lastlogin
              -rw------- 1 root wheel 5112 May 11 20:11 utx.log
              -rw------- 1 root wheel 0 May 11 20:11 vpn.log
              -rw------- 1 root wheel 0 May 11 20:11 watchdogd.log
              -rw------- 1 root wheel 0 May 11 20:11 wireless.log

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @techpro2004
                last edited by johnpoz

                @techpro2004 said in ssh wan block bug:
                -rw------- 1 root wheel 117458457 May 13 13:11 filter.log
                -rw------- 1 root wheel 114864576 May 13 13:09 filter.log.0
                -rw------- 1 root wheel 117943166 May 13 13:06 filter.log.1
                -rw------- 1 root wheel 126299122 May 13 13:03 filter.log.2
                -rw------- 1 root wheel 119374123 May 13 13:00 filter.log.3

                Those are rolling over ever what like 2-3 minutes..

                Yeah you got something logging a lot of stuff.. And its rolling your log over.. What is showing in the log? You got a bunch of noise?

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.03 | Lab VMs 2.7.2, 24.03

                1 Reply Last reply Reply Quote 0
                • T
                  techpro2004
                  last edited by

                  it is a ton of entries all similar to this.

                  May 13 14:00:00 pfSense newsyslog[45275]: logfile turned over due to size>500K
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,48031,0,none,17,udp,32,192.168.1.3,255.255.255.255,3000,2000,12
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,10479,0,none,17,udp,49,192.168.1.27,192.168.1.255,60686,32412,29
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,10478,0,none,17,udp,49,192.168.1.27,192.168.1.255,60688,32414,29
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,9469,0,none,17,udp,49,192.168.1.24,192.168.1.255,60687,32412,29
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,9468,0,none,17,udp,49,192.168.1.24,192.168.1.255,60689,32414,29
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,27614,0,none,17,udp,121,192.168.1.3,239.255.255.251,37810,37810,101
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,48715,0,DF,17,udp,863,192.168.1.4,239.255.255.251,37810,37810,843
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,34515,0,DF,17,udp,691,192.168.1.14,239.255.255.251,37810,37810,671
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,64642,0,DF,17,udp,691,192.168.1.16,239.255.255.251,37810,37810,671
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,9381,0,DF,17,udp,690,192.168.1.12,239.255.255.251,37810,37810,670
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,49402,0,DF,17,udp,691,192.168.1.18,239.255.255.251,37810,37810,671
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,20481,0,DF,17,udp,818,192.168.1.6,239.255.255.251,37810,37810,798
                  May 13 14:00:00 pfSense filterlog[7432]: 2,,,1000000101,ix0,match,block,in,4,0x0,,128,46560,0,none,17,udp,256,169.254.14.211,192.168.1.27,1900,60690,236
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,ix0,match,block,in,4,0x0,,64,25164,0,DF,6,tcp,52,192.168.1.45,44.239.252.140,60362,443,0,FA,1650631059,2175163242,727,,nop;nop;TS
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,41262,0,DF,17,udp,805,192.168.1.5,239.255.255.251,37810,37810,785
                  May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,ix0,match,block,in,4,0x0,,64,25165,0,DF,6,tcp,52,192.168.1.45,44.239.252.140,60362,443,0,FA,1650631059,2175163242,727,,nop;nop;TS
                  May 13 14:00:01 pfSense filterlog[7432]: 4,,,1000000103,ix0,match,block,in,4,0x0,,64,25166,0,DF,6,tcp,52,192.168.1.45,44.239.252.140,60362,443,0,FA,1650631059,2175163242,727,,nop;nop;TS
                  May 13 14:00:01 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,50938,0,DF,17,udp,759,192.168.1.8,239.255.255.251,37810,37810,739
                  May 13 14:00:01 pfSense filterlog[7432]: 2,,,1000000101,ix0,match,block,in,4,0x0,,128,43430,0,none,17,udp,256,169.254.14.211,192.168.1.24,1900,60691,236
                  May 13 14:00:01 pfSense filterlog[7432]: 4,,,1000000103,ix0,match,block,in,4,0x0,,64,25167,0,DF,6,tcp,52,192.168.1.45,44.239.252.140,60362,443,0,FA,1650631059,2175163242,727,,nop;nop;TS
                  May 13 14:00:02 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,64,3621,0,DF,17,udp,235,192.168.1.127,255.255.255.255,48461,10001,215
                  May 13 14:00:02 pfSense filterlog[7432]: 6,,,1000000105,bridge0,match,block,in,6,0x00,0x58ab3,1,UDP,17,215,fe80::f6e2:c6ff:feac:ad00,ff02::1,39544,10001,215
                  May 13 14:00:02 pfSense filterlog[7432]: 4,,,1000000103,ix0,match,block,in,4,0x0,,64,25168,0,DF,6,tcp,52,192.168.1.45,44.239.252.140,60362,443,0,FA,1650631059,2175163242,727,,nop;nop;TS
                  May 13 14:00:03 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,64,10936,0,DF,17,udp,235,192.168.1.121,255.255.255.255,39840,10001,215
                  May 13 14:00:03 pfSense filterlog[7432]: 6,,,1000000105,bridge0,match,block,in,6,0x00,0x0d024,1,UDP,17,215,fe80::f6e2:c6ff:feac:cb23,ff02::1,43124,10001,215
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,ix0,match,block,in,4,0x0,,64,25169,0,DF,6,tcp,52,192.168.1.45,44.239.252.140,60362,443,0,FA,1650631059,2175163242,727,,nop;nop;TS
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,7954,0,none,17,udp,165,192.168.1.19,239.255.255.250,61222,1900,145
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,10481,0,none,17,udp,49,192.168.1.27,192.168.1.255,60686,32412,29
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,10480,0,none,17,udp,49,192.168.1.27,192.168.1.255,60688,32414,29
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,9470,0,none,17,udp,49,192.168.1.24,192.168.1.255,60687,32412,29
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,9471,0,none,17,udp,49,192.168.1.24,192.168.1.255,60689,32414,29
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,64,32145,0,DF,17,udp,361,192.168.1.31,255.255.255.255,48029,10001,341
                  May 13 14:00:05 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,64,57897,0,DF,17,udp,361,192.168.1.30,255.255.255.255,36700,10001,341
                  May 13 14:00:07 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,27897,0,none,17,udp,129,192.168.1.27,239.255.255.250,60690,1900,109
                  May 13 14:00:07 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,10343,0,none,17,udp,129,192.168.1.24,239.255.255.250,60691,1900,109
                  May 13 14:00:07 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,48032,0,none,17,udp,32,192.168.1.3,255.255.255.255,58993,8602,12
                  May 13 14:00:08 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,2154,0,none,17,udp,68,192.168.1.27,224.0.0.251,5353,5353,48
                  May 13 14:00:08 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,34754,0,none,17,udp,68,192.168.1.24,224.0.0.251,5353,5353,48
                  May 13 14:00:08 pfSense filterlog[7432]: 2,,,1000000101,ix0,match,block,in,4,0x0,,128,43431,0,none,17,udp,256,169.254.14.211,192.168.1.24,1900,60691,236
                  May 13 14:00:09 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,128,48033,0,none,17,udp,32,192.168.1.3,255.255.255.255,58994,8600,12

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • T
                    techpro2004
                    last edited by techpro2004

                    the only bridge I have connects my wireguard interface to my lan

                    edit: I have no users currently connected to wireguard.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @techpro2004
                      last edited by

                      @techpro2004 I see a bunch of noise in there, you got multicast.. that stuff to 239.255.255.251, I see some directed broadcast traffic to 192.168.1.255, I see something with a APIPA address 169.254.x.x sending to sending to SSDP/UPnP (port 1900)..

                      Why do you have a bridge setup at all.. I don't use wireguard, but have tailscale setup and it doesn't have any bridge.. Not sure why you would bridge that - pretty sure WG is L3, bridging is at L2.. Not understanding why you would think you need a bridge?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.03 | Lab VMs 2.7.2, 24.03

                      1 Reply Last reply Reply Quote 0
                      • T
                        techpro2004
                        last edited by

                        I saw some instructions online a while ago that said to do it. Plus, i use wireguard to access my lan from my cellphone on the go

                        S johnpozJ 2 Replies Last reply Reply Quote 0
                        • S
                          SteveITS Rebel Alliance @techpro2004
                          last edited by

                          @techpro2004 Ultimately, logged blocks would be that pfSense is set to log the default block rule (the default setting), or log blocked bogons/RFC1918 (also default), or a rule is set to log the block. If you don't want the blocks logged you can turn those off. Or you can raise the max log file size so logs rotate less often. Or just ignore the sshguard notification.

                          (or in 24.03 it logs IGMP blocks)

                          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                          Upvote 👍 helpful posts!

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @techpro2004
                            last edited by

                            @techpro2004 said in ssh wan block bug:

                            i use wireguard to access my lan from my cellphone on the go

                            Yeah that has nothing to do with a "bridge"

                            Not sure what "guide" you followed but you wouldn't setup a bridge in any scenario that I can think of.. I use my tailscale to access stuff on multiple networks locally while I am out and about - no bridge setup..

                            https://docs.netgate.com/pfsense/en/latest/recipes/wireguard-ra.html

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.03 | Lab VMs 2.7.2, 24.03

                            1 Reply Last reply Reply Quote 0
                            • T
                              techpro2004
                              last edited by

                              bogons/rfc is disabled. the only rules that log is pfblocker auto rules.

                              S 1 Reply Last reply Reply Quote 0
                              • S
                                SteveITS Rebel Alliance @techpro2004
                                last edited by

                                @techpro2004 OK, so, don't do that? You have options of "log less," or "let the log files grow so they rotate less frequently." Or ignore the notification.

                                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                Upvote 👍 helpful posts!

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  SteveITS Rebel Alliance @SteveITS
                                  last edited by

                                  https://redmine.pfsense.org/issues/12747

                                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                  Upvote 👍 helpful posts!

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    techpro2004
                                    last edited by

                                    on the subject of logging less, How do I figure out where the filter logs are from.

                                    johnpozJ 1 Reply Last reply Reply Quote 0
                                    • T
                                      techpro2004
                                      last edited by

                                      I removed the bridge and wireguard still works and I am getting a lot less entries in the filter log.

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        techpro2004
                                        last edited by

                                        deleting the bridge seemed to help the sshguard messages also. thanks.

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @techpro2004
                                          last edited by

                                          @techpro2004 said in ssh wan block bug:

                                          How do I figure out where the filter logs are from.

                                          What do you mean its right there in the log who is sending the traffic.. For starters I would remove the bridge.. then you can filter on your interfaces where noise is coming in easier to not log it.

                                          May 13 14:00:00 pfSense filterlog[7432]: 2,,,1000000101,ix0,match,block,in,4,0x0,,128,46560,0,none,17,udp,256,169.254.14.211,192.168.1.27,1900,60690,236

                                          This is just pure noise.. You got something with APIPA address, ie didn't get a dhcp address? Sending SSDP to 192.168.1.27..

                                          May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,48715,0,DF,17,udp,863,192.168.1.4,239.255.255.251,37810,37810,843
                                          May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,34515,0,DF,17,udp,691,192.168.1.14,239.255.255.251,37810,37810,671
                                          May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,64642,0,DF,17,udp,691,192.168.1.16,239.255.255.251,37810,37810,671
                                          May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,9381,0,DF,17,udp,690,192.168.1.12,239.255.255.251,37810,37810,670
                                          May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,49402,0,DF,17,udp,691,192.168.1.18,239.255.255.251,37810,37810,671
                                          May 13 14:00:00 pfSense filterlog[7432]: 4,,,1000000103,bridge0,match,block,in,4,0x0,,1,20481,0,DF,17,udp,818,192.168.1.6,239.255.255.251,37810,37810,798

                                          Also pure noise.. Multicast Discovery of DNS Services is that multicast address - why would you need that noise logged or going over you wireguard connection?

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.03 | Lab VMs 2.7.2, 24.03

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post