• Good Morning,

    I just searched the logs and found some entries that I don't know how to handle:

    the IP is my Macbook and the log is from "Routing" - every few minutes I get spammed with that.

    Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:17:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:17:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:15:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:15:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:57 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:57 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:13:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring

    The other spam I get is from the "Resolver" and looks like this

    Jun 3 08:20:20 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:14:24 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:12:51 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:11:52 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:11:46 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:10:37 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:09:07 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:07:45 dnsmasq[12752]: read /etc/hosts - 33 addresses
    Jun 3 08:04:57 dnsmasq[12752]: read /etc/hosts - 33 addresses

    Please help me where I have to search that this spamming stops. Where can be the issue (despite of me).


  • @DaReaLDeviL:

    Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
    Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring

    You appear to be using a routing daemon of some kind, are you running RIP? Without knowing your exact routing setup, I'm just guessing, but you could probably prevent these log entries with a firewall rule on your LAN interface since they are all from the same IP and port… but if you are actually using UPnP on your network then filtering it out of your router could break things. (I suspect it won't, but what do I know?)

    I'd try a rule like this:

    ID  Proto  Source        Port    Destination  Port      Gateway      Queue        Schedule
    block *  IPv4  192.168.1.199  64391    LAN Address  *        *            *

    @DaReaLDeviL:

    Jun 3 08:20:20 dnsmasq[12752]: read /etc/hosts - 32 addresses
    Jun 3 08:09:07 dnsmasq[12752]: read /etc/hosts - 32 addresses

    This one I can't help with other than to suggest you double-check all your dnsmasq settings? Maybe reboot the router to see if it clears up?