How can I disable logging of specific firewall refusals?

Help
1

A Ubiquiti device is polling my machine every few seconds and the firewall is spamming the system log:

Dec 06 10:24:41 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=19276 PROTO=TCP SPT=59102 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:25:11 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=21135 PROTO=TCP SPT=59104 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:25:14 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=21235 PROTO=TCP SPT=59104 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:25:18 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=21265 PROTO=TCP SPT=59104 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:25:26 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=22044 PROTO=TCP SPT=59104 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:25:56 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=24170 PROTO=TCP SPT=59106 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:25:57 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=24193 PROTO=TCP SPT=59106 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:25:59 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=24204 PROTO=TCP SPT=59106 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:26:03 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=24408 PROTO=TCP SPT=59106 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0
Dec 06 10:26:11 nixos kernel: refused connection: IN=wifi OUT= MAC=e0:d4:e8:xx:xx:xx:68:d7:9a:xx:xx:xx:08:00 SRC=192.168.0.2 DST=192.168.0.101 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=24498 PROTO=TCP SPT=59106 DPT=8080 WINDOW=29200 RES=0x00 SYN URGP=0

How can I omit these log entries?

2

At the beginning of nixos-fw-log-refuse, match the request and exit early:

{
  networking.firewall.extraCommands = ''
    # Silence refusal of Ubiquiti Inform updates
    iptables \
      --insert nixos-fw-log-refuse 1 \
      --source 192.168.0.2 \
      --protocol tcp \
      --dport 8080 \
      --jump nixos-fw-refuse
  '';
}