From owner-freebsd-isp Wed Nov 8 18:45:19 2000 Delivered-To: freebsd-isp@freebsd.org Received: from velvet.sensation.net.au (serial1-2-velvet-brunswick.sensation.net.au [203.20.114.195]) by hub.freebsd.org (Postfix) with ESMTP id 293BD37B4C5 for ; Wed, 8 Nov 2000 18:45:13 -0800 (PST) Received: from localhost (rowan@localhost) by velvet.sensation.net.au (8.9.3/8.9.3) with ESMTP id NAA55948 for ; Thu, 9 Nov 2000 13:45:07 +1100 (EST) (envelope-from rowan@sensation.net.au) X-Authentication-Warning: velvet.sensation.net.au: rowan owned process doing -bs Date: Thu, 9 Nov 2000 13:45:05 +1100 (EST) From: Rowan Crowe To: freebsd-isp@freebsd.org Subject: Re: ipfw - log to somewhere else? In-Reply-To: <20001108213026.E12659@puck.firepipe.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 8 Nov 2000, Will Andrews wrote: > On Thu, Nov 09, 2000 at 12:40:07PM +1100, Rowan Crowe wrote: > > While I still want those ports blocked and logged for reporting purposes, > > is there a way to divert the log entries to another file? > > man syslog.conf Uh thanks, but if you could be a little more verbose I'd appreciate it. I have tried: !ipfw *.* /var/log/ipfw.log This sort of works, ipfw log entries on that machine go to *both* ipfw.log and messages (which doesn't really solve the messages log bloat problem...), however remote ipfw log entries still go to messages only. Cheers. -- Rowan Crowe http://www.rowan.sensation.net.au/ Sensation Internet Services http://info.sensation.net.au/ Melbourne, Australia Phone: +61-3-9388-9260 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message