From owner-freebsd-questions  Sun Jun 21 23:40:54 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id XAA00423
          for freebsd-questions-outgoing; Sun, 21 Jun 1998 23:40:54 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from ns.cityip.co.za (ns.cityip.co.za [196.25.223.140])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id XAA00404
          for <questions@freebsd.org>; Sun, 21 Jun 1998 23:40:42 -0700 (PDT)
          (envelope-from wjv@cityip.co.za)
Received: from wjv by ns.cityip.co.za with local (Exim 1.82 #2)
	id 0yo0G4-0003RL-00; Mon, 22 Jun 1998 08:39:16 +0200
Message-ID: <19980622083916.A13180@cityip.co.za>
Date: Mon, 22 Jun 1998 08:39:16 +0200
From: Johann Visagie <wjv@cityip.co.za>
To: Brendan Kosowski <brendan@bmkind.lnk.telstra.net>, questions@FreeBSD.ORG
Subject: Re: Syslog Question
Mail-Followup-To: Brendan Kosowski <brendan@bmkind.lnk.telstra.net>,
	questions@FreeBSD.ORG
References: <Pine.BSF.3.96.980621152811.6520A-100000@bmkind.lnk.telstra.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.91.1i
In-Reply-To: <Pine.BSF.3.96.980621152811.6520A-100000@bmkind.lnk.telstra.net>; from Brendan Kosowski on Sun, Jun 21, 1998 at 03:35:06PM +1000
X-PGP: ftp://ftp.cityip.co.za/users/wjv/pubkey.asc
X-URL: http://www.cityip.co.za/~wjv/
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Sun, 21 Jun 1998 at 15:35 SAT, Brendan Kosowski wrote:
> 
> I was a Linux user but have now changed to FreeBSD. I noticed that with
> Linux, any TELNET or FTP activity was logged to /var/log/messages.
> 
> I noticed that FreeBSD does not log TELNET or FTP activity to
> /var/log/messages.
> 
> My syslog.conf is very simple :
> 
> *.info		/var/log/messages

First suggestion:  Make a study of syslog.conf(5).  If the above is all
you're doing with syslogd, you're missing out on a lot.  ;-)

Second suggestion:  Play with the auth and authpriv facilities.  Change the
above to include auth.* and authpriv.*, and see if you get what you need.
(Note:  You might want to send authpriv.* to a separate logfile, readable
only by root.)

Last suggestion:  Install the tcp_wrappers port.  tcpd is much more
conscientious about logging to syslogd than many "raw" daemons.

-- V

Johann Visagie | Email: wjv@CityIP.co.za | Tel: +27 21 419-7878

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message