Date: Sun, 10 Jun 2001 12:23:42 -0500 From: Oscar Ricardo Silva <oscars@mail.utexas.edu> To: "Dave Atkins" <dave@atkinshome.com> Cc: questions@freebsd.org Subject: Re: small /var partition; how do I prevent log file overflow? Message-ID: <5.1.0.14.2.20010610121833.00a132b0@mail.utexas.edu> In-Reply-To: <001001c0f1cf$18be68b0$0300a8c0@dave> References: <000701c0f077$1e6342d0$0300a8c0@dave>
next in thread | previous in thread | raw e-mail | index | archive | help
The log files are rotated through newsyslog. Read through and edit /etc/newsyslog.conf so that the log files are rotated in the order and levels YOU want. I might also suggest relocating /var to another slice, for example, /usr/var and leaving a symbolic link at the root, /var ---> /usr/var. This way you get additional space available to var. Oscar At 10:02 AM 6/10/01 -0700, Dave Atkins, you wrote: >I've done this so many times now on various operating systems that I should >know better...but when I did the install of freebsd 4, I let the install >program set up my partitions. Now, I've got this great setup: > >FreeBSD 4.3-RELEASE (DAVE) #1: Sat Jun 9 15:52:40 PDT 2001 >$ df -k >Filesystem 1K-blocks Used Avail Capacity Mounted on >/dev/ad0s1a 99183 35244 56005 39% / >/dev/ad0s1f 1350983 614495 628410 49% /usr >/dev/ad0s1e 19815 1264 16966 7% /var >procfs 4 4 0 100% /proc > >My concern is that /var is so small. I am running a firewall and doing >limited logging, but still, I can imagine 20 Meg of log files happening. > >I will never *need* 20 meg of logs, so how can I configure things to avoid >overflowing space? As I recall, the log files somehow cycle/rotate (maillog >does a daily file and compresses itself). I'm going to turn off sendmail >anyway, so I won't worry about the spool directory, but I am nervous about >/var/log/security and the other log files. I have seen several systems crash >because of DoS attacks or just forgetfulness on the part of the sysadmin >that led to exploding log files. What is the best way to cap these files and >prevent the situation from getting out of control? > >Thanks > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.2.20010610121833.00a132b0>