Re: How to get rif of DHCP broadcast logging?


I would have thought, one could construct a packet filter along
The lines of this:

Block
UDP
Local port: - fixed port 68 - direction: Receive
Remote port: - fixed port 67 - 
And then untick "log any packets matching this filter.

Haven`t tried it, though.

I did once construct a packet filter to accept DHCP broadcast from
external source. Had to use 0.0.0.0 as "This ISA server`s external
address" to get it
To work. It might be applicable in the above example too.

 David Elmquist


-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: 6. januar 2002 19:26
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: How to get rif of DHCP broadcast logging?

http://www.ISAserver.org


No; ISA logs all blocked traffic, regardless of its origin.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

----- Original Message -----
From: "Leo" <leo@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Sunday, January 06, 2002 04:10
Subject: [isalist] How to get rif of DHCP broadcast logging?


http://www.ISAserver.org


I'm running a DHCP server on the ISA Server. The external adapter get's
it's address from an external DHCP server (at my ISP).
I notice lots of blocked UDP packets (port 67, 68) if I check the
loggings
on the ISA server. They are comming from my internal adapter.

I want to prevent these broadcasts to my external adapter because they
are
flooding my logfile.

Is there a way to do this??

Thanks,
Leo

2002-01-06 00:00:15 192.168.255.1 255.255.255.255 Udp 68 67
BLOCKED 62.45.59.38
2002-01-06 00:00:15 192.168.255.1 255.255.255.255 Udp 67 68
BLOCKED 62.45.59.38
2002-01-06 00:00:23 192.168.255.1 255.255.255.255 Udp 68 67
BLOCKED 62.45.59.38
2002-01-06 00:00:23 192.168.255.1 255.255.255.255 Udp 67 68
BLOCKED 62.45.59.38
2002-01-06 00:00:31 192.168.255.1 255.255.255.255 Udp 68 67
BLOCKED 62.45.59.38
2002-01-06 00:00:31 192.168.255.1 255.255.255.255 Udp 67 68
BLOCKED 62.45.59.38

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
david@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: