My firewall has blacklisted connecting to every IP that isn't my whitelisted VPN servers. How do I get dhclient to shut up in the syslog?

d_K · 08-28-2016, 12:34 PM

My setup works. I'm not giving the luxury of my internal IP connecting to anything but VPN servers. The is especially useful when tun0 goes down occasionally because of server-side VPN issues. My router has dhcp reservation so it always serves my box the same internal IP.

The problem? The following is being spammed every ~17 seconds in the syslog: items between [brackets] are redacted:

Code:

dhclient.c:[x]: Failed to send 300 byte long packet over fallback interface.
DHCPREQUEST of [my internal IP] on [my wifi interface] to [my internal router's gateway] port 67 (xid=[x])

How do I tell dhclient to be less spammy? It's not going to get a new internal IP upon renewal so I'd prefer disabling the option to even check or make the renewal time infinite.

d_K · 08-28-2016, 12:43 PM

Ok I might have rectified this as another custom rule to whitelist the gateway seems to have quieted dhclient for now. I'm not sure how advisable this is security-wise as I now have access to my router's gui page while being connected to a VPN. Seems like a bad combination to me.