Hi,
If I login to the console and doing something and the firewall blocks someone I seem to get the alerts come up on the console.
Is there something I can do to stop these alerts appearing?
Thanks
How to stop console alerts?
Re: How to stop console alerts?
I came here looking for the same answer. What I'm seeing is that while any user is SSH'd in, even a normal user, they see random console messages like:
Message from syslogd@host at Feb 22 18:34:05 ...
kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=1.2.3.4 DST=5.6.7.8 LEN=65 TOS=0x10 PREC=0x00 TTL=64 ID=5761 DF PROTO=TCP SPT=21 DPT=48357 SEQ=305140503 ACK=1229315770 WINDOW=14600 RES=0x00 ACK PSH FIN URGP=0 OPT (0101050A4945DEB94945DEBA)
Normal users should not see that kind of thing. Any ideas on preventing it would be appreciated.
- Scott
Message from syslogd@host at Feb 22 18:34:05 ...
kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=1.2.3.4 DST=5.6.7.8 LEN=65 TOS=0x10 PREC=0x00 TTL=64 ID=5761 DF PROTO=TCP SPT=21 DPT=48357 SEQ=305140503 ACK=1229315770 WINDOW=14600 RES=0x00 ACK PSH FIN URGP=0 OPT (0101050A4945DEB94945DEBA)
Normal users should not see that kind of thing. Any ideas on preventing it would be appreciated.
- Scott
-
- Moderator
- Posts: 1524
- Joined: 01 Oct 2008, 09:24
Re: How to stop console alerts?
This specific message is produced by the kernel, not the csf configured iptables, and it broadcasts it at the (r)syslog *.emerg level. If you don't want to see it you'll need to reconfigure (r)syslog on your system.kernel:nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=1.2.3.4 DST=5.6.7.8 LEN=65 TOS=0x10 PREC=0x00 TTL=64 ID=5761 DF PROTO=TCP SPT=21 DPT=48357 SEQ=305140503 ACK=1229315770 WINDOW=14600 RES=0x00 ACK PSH FIN URGP=0 OPT (0101050A4945DEB94945DEBA)