Keeps getting spammed

[qkrtjdwls91]

Vicibox keeps randomly sending me these messages on the console and its really annoying. The thing even showed up during installation.
https://ibb.co/GQ39FZz

https://ibb.co/Mpg1bc8

Can someone tell me how to stop/fix this?

[qkrtjdwls91]

additional note: I installed using the "Vicibox installation disk" here:
http://www.vicibox.com/server/index.html

nvm, "dmesg -n 1" made it stop, though it just silenced the error, and didnt actually stop/fix it.

apparently the error is comming from mDNS requests?
https://forums.opensuse.org/showthread.php/521813

[williamconley]

1) The link you provided has an ever-changing .iso installer. It will change routinely. The splash/motd screen should provide you with the version of the installer if you've lost it. If it was downloaded in the last day or two, you could just click on it again to get the name of the .iso presently.

2) That's not spam. It's by design. It's a notification of a dropped firewall packet. Most servers do not have a console connected to them, so no one sees that screen. If someone connects a screen directly to the server, however, they would immediately see the problem if they were under brute force attack on a closed network port. So that's a feature, not a bug.

[qkrtjdwls91]

I found that we had a computer on the network at address 192.168.1.7 that is doing global pings every couple of seconds, but i still have no idea what that computer is or where it is located. Because I don't have access to the router yet.

Is there a way to set it so that the dropped packet doesn't just invasively display on the console that i am trying to use and just adds a line on a log that i can look at later/whenever? it is very distracting and annoying for it to pop up while trying to actually use the console. Especially when i am trying to configure the server's sip/dialplan,

the name of the iso is "ViciBox_v8_1.x86_64-8.1.2.iso"

edit: Okay, i somewhat fixed this problem by doing
iptables-save > iptables
cp iptables iptables.backup
vi iptables (remove the lines that create the warning message on drop)
iptables-restore < /etc/sysconfig/iptables

the problem with this method is that it simply removes the logs, and i still want them in a log so that i can take a look at them later... I just dont want them shoved in my face while working on the server using the console.

will probably look into modifying the append command of the deleted rows and figuring out how to modify

[williamconley]

1) yast firewall "Logging Level"

2) IF these packets are on an internal network, change that internal network to unprotected and then stop logging accepted packets.

3) You can also just ignore this single IP address permanently without logging, thus removing any danger from this rogue without altering anything else.

file:

Code: Select all

/etc/sysconfig/scripts/SuSEfirewall2-custom

Section:

Code: Select all

fw_custom_before_port_handling() {

At the beginnning of this section:

Code: Select all

iptables -I INPUT 1 -s xx.xx.xx.xx -p all -j DROP