DROP_CTINVALID ICMP Port: 53

[jon]

@fstarter

are these drops such special that nobody knows them?

this might help:

DROP_CT_INVALID message since upgrading

Hi, these are nothing to worry about, and IPFire has always dropped these packets - they just were never logged, which is a considerable disadvantage when it comes to troubleshooting and debugging. DROP_CTINVALID was introduced in Core Update 164 to overcome this, but it did not change anything on the firewall engines’ behaviour. No, that switch is the correct one. Because reloading the firewall engine - which is what happens if firewall rules in the GUI are modified, and the “apply” butto…