When BCP38 prevented spoofed packet attempts are dropped this happens silently.
Coud an option on the bcp38 package and on luci-app-bcp38 be added so that when dropping something is written to the systemlog? Ex: “BCP38 DROP…”
Spoofed packet attempts may be an indication that a device in the network has been compromised and currently the bcp38 package does not provide an option for this. It should be possible for this to be monitored for detecting such compromised hosts in the network.
A possible implementation would be:
- addition checkbox to enable logging to the system log on luci-app-bcp-38.
- addition of support for enabling loggin on the bcp38 script
- If checkbox is checked then the nft add command will include something like “log prefix "BCP38 DROP: " level warning drop”