[{"id":1758655,"web_url":"http://patchwork.ozlabs.org/comment/1758655/","msgid":"<20170828155139.GA20496@salvia>","list_archive_url":null,"date":"2017-08-28T15:51:39","subject":"Re: [PATCH nf-next] netfilter: conntrack: don't log \"invalid\" icmpv6\n\tconnections","submitter":{"id":1315,"url":"http://patchwork.ozlabs.org/api/people/1315/","name":"Pablo Neira Ayuso","email":"pablo@netfilter.org"},"content":"On Fri, Aug 25, 2017 at 02:59:41AM +0200, Florian Westphal wrote:\n> When enabling logging for invalid connections we currently also log most\n> icmpv6 types, which we don't track intentionally (e.g. neigh discovery).\n> \"invalid\" should really mean \"invalid\", i.e. short header or bad checksum.\n> \n> We don't do any logging for icmp(v4) either, its just useless noise.\n\nApplied, thanks.\n--\nTo unsubscribe from this list: send the line \"unsubscribe netfilter-devel\" in\nthe body of a message to majordomo@vger.kernel.org\nMore majordomo info at http://vger.kernel.org/majordomo-info.html","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":"ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=vger.kernel.org\n\t(client-ip=209.132.180.67; helo=vger.kernel.org;\n\tenvelope-from=netfilter-devel-owner@vger.kernel.org;\n\treceiver=)","Received":["from vger.kernel.org (vger.kernel.org [209.132.180.67])\n\tby ozlabs.org (Postfix) with ESMTP id 3xgx9240sMz9sNr\n\tfor ;\n\tTue, 29 Aug 2017 01:52:06 +1000 (AEST)","(majordomo@vger.kernel.org) by vger.kernel.org via listexpand\n\tid S1751748AbdH1PwE (ORCPT );\n\tMon, 28 Aug 2017 11:52:04 -0400","from ganesha.gnumonks.org ([213.95.27.120]:37792 \"EHLO\n\tganesha.gnumonks.org\" rhost-flags-OK-OK-OK-OK) by vger.kernel.org\n\twith ESMTP id S1751744AbdH1PwD (ORCPT\n\t);\n\tMon, 28 Aug 2017 11:52:03 -0400","from 129.166.216.87.static.jazztel.es ([87.216.166.129]\n\thelo=gnumonks.org) by ganesha.gnumonks.org with esmtpsa\n\t(TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2)\n\t(envelope-from )\n\tid 1dmMKC-0002ZL-D1; Mon, 28 Aug 2017 17:51:42 +0200"],"Date":"Mon, 28 Aug 2017 17:51:39 +0200","From":"Pablo Neira Ayuso ","To":"Florian Westphal ","Cc":"netfilter-devel@vger.kernel.org","Subject":"Re: [PATCH nf-next] netfilter: conntrack: don't log \"invalid\" icmpv6\n\tconnections","Message-ID":"<20170828155139.GA20496@salvia>","References":"<20170825005941.8773-1-fw@strlen.de>","MIME-Version":"1.0","Content-Type":"text/plain; charset=us-ascii","Content-Disposition":"inline","In-Reply-To":"<20170825005941.8773-1-fw@strlen.de>","User-Agent":"Mutt/1.5.23 (2014-03-12)","X-Spam-Score":"-2.9 (--)","Sender":"netfilter-devel-owner@vger.kernel.org","Precedence":"bulk","List-ID":"","X-Mailing-List":"netfilter-devel@vger.kernel.org"}}]