Block all IPv6 - Disable logging

[imidoriya]

There is no option to disable the logging on the "Block all IPv6" rule. Can you add an option to on that rule to turn off logging? It's at the top of the floating and it doesn't seem I can put a rule above it to do the same thing without logging.

[fichtner]

From my understanding IPv6 block logging is hardwired to logging option for default blocking (on or off globally).

[imidoriya]

It's not the "Default deny rule" if that's what you're suggesting.

The option is under "Firewall: Settings: Advanced" and unchecking "Allow IPv6". This creates a floating rule that blocks all IPv6 traffic, however, there is no option to not log it. It's filling up my firewall logs and it's not anything I care to see. Since you're specifically disabling it, you would almost think to set logging off by default.

[fichtner]

I'm not here to argue, just to help. I'll reiterate more explicitly: when you go to System: Settings: Logging you can disable default block logging.

[imidoriya]

Sorry, not arguing. Just trying to understand and explain. Yeah, I don't want to disable all block logging. If IPv4 traffic is blocked, I want to see that. Since the IPv6 option creates its own rule, it would be nice to have the option to turn just that logging off.

I could turn "Allow IPv6" back on and then create my own FW rule - I've done that before, but it would be nice to have the logging accessible for it.

[fichtner]

Understood. I'm assigning this to the community pool for a contributor to grab and implement.

[AdSchellevis]

This issue has been automatically timed-out (after 180 days of inactivity).

For more information about the policies for this repository,
please read https://github.com/opnsense/core/blob/master/CONTRIBUTING.md for further details.

If someone wants to step up and work on this issue,
just let us know, so we can reopen the issue and assign an owner to it.