Due to an iSCSI software issue on my NAS I get many many messages like this in my log:

May 13 15:43:21 	PC_PLUS_10G 	What did I block !!?? (1646915641) 	192.168.11.34:1532		192.168.18.20:3260		TCP:S 

"What did I block" is the end rule in many of my interface related rulesets.

What ever. I want to get rid of these messages of even better see them lets say one per 5 minutes or so.

Since "one per 5 minutes" seems to be impossible I tried to get rid of the messages by simply define a rule just before the end rule like this

That seems to work, but in this case I would prefer to filter on status TCP:S as well.

Is that possible?
Is there a better way to solve this problem?![whatditiblock.JPG](/assets