Looking for Documentation on Fios-G1100 Firewall Security Log

[highlander11]

Trying to understand "Event-Type" and "Log Level" in Firewall Security Log. Example Event-Types such as "ulogd[883]" (which appear to use a universal log framework) and Log Level of "notice<173>" are not documented in the User Guide at https://www.verizon.com/about/sites/default/files/fios-quantum-router-user-guide-2018.pdf.

Thanks for any pointers.  

[dslr595148]

Hello. Welcome to the Forums. You are largely talking to other customers here.

#1 You only need to use their NAT router if:

a) You have FIOS TV One (or maybe I got the wording wrong. Ex FIOS One TV).

b) Or if you need support from them.

#2 But please keep in mind: That info is only base upon what I heard/read as I do and never had FIOS before.

--

So assuming that you do not have FIOS TV, a possible fix/work around is to use your own NAT router and hardy never looking back at their NAT router.

Unknown the exact error but after I searched for "ulogd[883]" with Google, here is the result back:

https://forums.verizon.com/t5/Fios-Internet/Trouble-connecting-with-JetBlue-com/td-p/885270

[EDIT] I also tried to search for ulogd[883] and here is what I got back

https://forums.verizon.com/t5/Fios-Internet/Are-these-hack-attacks-to-my-Quantum-Router/td-p/837970

https://www.reddit.com/r/Fios/comments/awv5ns/quantum_gateway_router_firewall_dropping_packets/

https://www.bleepingcomputer.com/forums/t/610857/firewall-blocking-while-im-online/

https://forums.tomshardware.com/threads/repeated-incoming-connections-from-odd-sources.2352408/

[Cang_Household · Accepted solution]

Lots of advanced features are not documented in the User Manual for simplicity's sake.

G1100 logs are compiled from different sources and need to be put into context to make sense of. There's a log pattern for intermittent WAN disconnection, a pattern for PON issue, a pattern for GWR failure, a pattern for DDoS attacks...

ulogd is a logging daemon and is related to the iptables function. Different log levels are for different severities and are useful for alarm detection if you are operating a Syslog receiver. You can stream logs from G1100 in real time too and store them on your local server/computer.