On 18/09/15 18:14, Chris Walker wrote:

Hello,

If I run dmesg, it scrolls away with loads of this type of message :- [ 9958.682112] Shorewall:net-fw:DROP:IN=enp6s0 OUT= MAC=40:61:86:05:f9:31:00:24:a5:bd:b4:dc:08:00 SRC=192.168.1.1 DST=192.168.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=53299 DF PROTO=TCP SPT=43075 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0

In an effort to fix this, I've looked at the installed packages and I see that not only do I have shorewall installed, but also shorewall6. Should I have both?

I've looked online at this page to start with - http://www.shorewall.net/manpages6/shorewall6-zones.html - but I can't see which bits of the system are causing the error and hence which bits I should change.

So, what can I do to suppress these messages as they're filling up the disc?

Any help appreciated.

I use shorewall, and very good it is too. IIRC, this is controlled by the settings in /etc/shorewall/shorewall.conf under the section:

############################################################################### # L O G G I N G ###############################################################################

and then implemented in

/etc/shorewall/policy and /etc/shorewall/rules (which overrides the policy file).

The documentation is here:

http://shorewall.net/shorewall_logging.html

and a good example to stop your particular problem is here:

http://stackoverflow.com/questions/11977000/shorewall-filling-up-my-log-file...

Cheers, Laurie.

On 18 Sep 2015 6:16 pm, "Chris Walker" alug_cdw@the-walker-household.co.uk wrote:

I've looked online at this page to start with - http://www.shorewall.net/manpages6/shorewall6-zones.html - but I can't see which bits of the system are causing the error and hence which bits I should change.

I don't know shorewall at all but I can't see what makes these "errors" as opposed to just unwanted log detail?

So, what can I do to suppress these messages as they're filling up the disc?

From a quick Google this looked useful:

http://superuser.com/questions/351387/how-to-stop-kernel-messages-from-flood...

I have no idea if that'll be any use but I figured there was no harm passing it on in case.

Mark