From b13b22da054da89c943f3f2543ece8d468cea3c6 Mon Sep 17 00:00:00 2001 From: Jeltz Date: Mon, 1 Mar 2021 19:39:11 +0100 Subject: [PATCH] Add ignored destinations for firewall logs --- roles/router/templates/firewall_config.py | 5 +++++ roles/router/templates/firewall_config_aurore.py | 6 ++++++ 2 files changed, 11 insertions(+) diff --git a/roles/router/templates/firewall_config.py b/roles/router/templates/firewall_config.py index 9971765..07e25e0 100644 --- a/roles/router/templates/firewall_config.py +++ b/roles/router/templates/firewall_config.py @@ -36,6 +36,11 @@ interfaces_type = { 'admin' : ['ens18'] } +log_ignore_v4 = [ + '224.0.0.0/24', + '224.0.1.0/24', + '239.0.0.0/8', +] ### Specify nat settings: name, interfaces with range, and global range for nat ### WARNING : "interface_ip_to_nat' MUST contain /24 ranges, and ip_sources MUST diff --git a/roles/router/templates/firewall_config_aurore.py b/roles/router/templates/firewall_config_aurore.py index 9565e3b..91a4808 100644 --- a/roles/router/templates/firewall_config_aurore.py +++ b/roles/router/templates/firewall_config_aurore.py @@ -33,6 +33,12 @@ interfaces_type = { 'admin' : ['ens19', 'ens20', 'ens23'] } +log_ignore_v4 = [ + '224.0.0.0/24', + '224.0.1.0/24', + '239.0.0.0/8', +] + ### Specify nat settings: name, interfaces with range, and global range for nat ### WARNING : "interface_ip_to_nat' MUST contain /24 ranges, and ip_sources MUST ### contain /16 range