4. 239.255.255.250:1900 UDP all over the firewall log.

239.255.255.250:1900 UDP all over the firewall log.


  • Newbie here..

    from 2 IPs in my LAN my firewall log only has alot of alerts only from these two IPs.

    192.168.10.1:1901 239.255.255.250:1900 UDP
    192.168.10.12:56839 239.255.255.250:1900 UDP
    192.168.10.12:38184 239.255.255.250:1900 UDP

    192.168.10.1 = Cisco EPC3940AD EuroDocsis 3.0 2-PORT Voice Gateway ( ISP )
    192.168.10.12 = PFsense.

    How can I disable this alert in my logs ?

    0
  • Rebel Alliance Global Moderator

    turn off default deny log, setup your own logging of what you want.. say syn only.. Or setup a rule in your ruleset to block/allow but do not log it. 239.255.x.x is multicast address.

    Are you blocking bogon on your lan interface? that range is include in the bogon 224.0.0.0/4 so if you are blocking bogon those would be blocked.. I can not for the life of me think of a valid scenario where you would want/need to block bogon on a local interface.

    0
 

© Copyright 2002 - 2018 Rubicon Communications, LLC | Privacy Policy