up_rulebase_execute_match messages in /var/log/message

D_TK — Wed, 19 Jun 2024 16:02:36 GMT

Hi everyone. I'm seeing a non stop slew of this message in the /var/log/message.x files. So many of them that the 11 message files only go about 8 hours currently.

Jun 17 17:21:38 2024 gateway-name kernel:[fw4_0];[x.x.x.x:60217 -> y.y.y.y:443] [ERROR]: up_rulebase_execute_match: Match on 'before drop' implied rules - action treated as DROP

The source can be different, the dest is always the same - the gateway VIP of their locally connected gateway. sk120964 does an ok job of describing the message itself, but how can i keep these entries from writing to the /var/log/message file?

Thanks

Re: up_rulebase_execute_match messages in /var/log/message

PhoneBoy — Thu, 20 Jun 2024 18:11:10 GMT

Do you have an explicit rule in the rulebase dropping this traffic?

topic up_rulebase_execute_match messages in /var/log/message in General Topics

up_rulebase_execute_match messages in /var/log/message

Re: up_rulebase_execute_match messages in /var/log/message