From 8cc906077ece6f0713760a07f1a215394f9df061 Mon Sep 17 00:00:00 2001
From: Martinski4GitHub <119833648+Martinski4GitHub@users.noreply.github.com>
Date: Fri, 27 Feb 2026 01:17:17 -0800
Subject: [PATCH] Improved Ethernet Filter Configuration

Improvements in the syslog-ng Ethernet filter configuration file to prevent it from capturing log entries intended for the Skynet/firewall log files.
---
 syslog-ng.share/ethernet | 15 +++------------
 1 file changed, 3 insertions(+), 12 deletions(-)

diff --git a/syslog-ng.share/ethernet b/syslog-ng.share/ethernet
index 18ceb6e..f9c00e0 100644
--- a/syslog-ng.share/ethernet
+++ b/syslog-ng.share/ethernet
@@ -1,5 +1,5 @@
 # log ethernet change to /opt/var/log/ethernet.log only #
-# Last Modified: 2026-Feb-25 #
+# Last Modified: 2026-Feb-27 #
 
 destination d_ethernet {
     file("/opt/var/log/ethernet.log");
@@ -11,17 +11,8 @@ filter f_kernel {
 };
 
 filter f_ethernet {
-   (message("eth1") or
-    message("eth2") or
-    message("eth3") or
-    message("eth4") or
-    message("eth5") or
-    message("eth6") or
-    message("eth7") or
-    message("eth8") or
-    message("br0:") or
-    message("br1:")) and
-    not match('IN=eth.* OUT=.* MAC=.*' value("MESSAGE"));
+   (message('eth[0-9]') or message('br[0-9]:')) and
+    not match('IN=eth. OUT=' value("MESSAGE"));
 };
 
 log {