I get these:
15:20:17.987293 ep0 @0:3 b 217.8.XXX.XX -> 220.127.116.11 PR igmp len 24
15:18:57.532699 ep0 @0:3 b 217.8.XXX.XXX -> 18.104.22.168 PR igmp len 24
All the time. Only from 2 source ip's so I figured I could just make a rule
Two ip's without logging anything. Still shows up as you can see.
The rules are:
@8 block in quick from 217.8.XXX.XX/32 to any group 200
@9 block in quick from 217.8.XXX.XXX/32 to any group 200
I also tried to do something else, block anything with destination
But that didn't work any better either. Used any as source, any protocol and
On the WAN interface.
Am I missing something here or is there some sort of bug causing this? I've
Blocked out without loging anything going into ports 138 and 139, this works
Without a hitch.
Christian Nyegaard mailto:christian at nyegaard dot net