Firewall being swamped by IPv6 RFC4890 requirements (ICMP) items.

[edmscan]

I have been having issue with the firewall having a ton of these items "IPv6 RFC4890 requirements (ICMP)" in the Firewall Live view. I installed Unbound and IDS / IPS recently as well as Ntopng and Redis. I am not 100% sure what is causing it.

Any assistance would be appreciated or do I just ignore it ?

Thanks

[meyergru]

You obviously enabled logging of default pass rules under:  Firewall: Settings: Advanced -> Logging

Usually, those are not very interesting. You can look at the details of these packets to find which client(s) is/are causing them and what specifically are the requests.

E.g., ICMP does not have to be ping, it can also be neighbour discovery, which is perfectly normal.

[edmscan]

Thanks. I can filter them from the live log view but I cannot eliminate them from the Firewall view in the dashboard. I guess it is what it is. If I disable it .. then my firewall live view shows nothing.

[meyergru]

Yes, you can and I already told you, where the setting is, see attached picture. And if your firewall log does not show anything else, then either that is a good thing (tm), or you have not enabled logging for "default block" or your specific rules at all or you are behind CG NAT or have double NAT of some kind such that you are not being scanned or you do not see it.