Comment 2 for bug 207156

Revision history for this message
Jamie Strandboge (jdstrand) wrote : Re: UFW syslog / kernel.log spam

Thank you for reporting this bug and helping to make Ubuntu even better. The ufw command does allow turning logging on and off with:

$ sudo ufw logging on
$ sudo ufw logging off

The iptables manpage says "Possible states are INVALID meaning that the packet is associated with no known connection." Matching packets should be logged in the general case, as they could indicate an attack. If you want to fine-tune your firewall, you can make adjustments in the /etc/ufw/*.rules files. Please see 'man ufw' for details.