From owner-freebsd-questions@FreeBSD.ORG  Sun Sep  4 05:24:45 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C17C716A41F
	for <freebsd-questions@freebsd.org>;
	Sun,  4 Sep 2005 05:24:45 +0000 (GMT) (envelope-from rperry@gti.net)
Received: from apollo.gti.net (apollo.gti.net [199.171.27.7])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 83F5743D45
	for <freebsd-questions@freebsd.org>;
	Sun,  4 Sep 2005 05:24:45 +0000 (GMT) (envelope-from rperry@gti.net)
Received: from homey.my.domain (morr0635.gti.net [208.216.122.35])
	by apollo.gti.net (mail) with ESMTP id 4E9D035AD7
	for <freebsd-questions@freebsd.org>;
	Sun,  4 Sep 2005 01:22:31 -0400 (EDT)
From: Bob Perry <rperry@gti.net>
To: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Content-Type: text/plain
Date: Sun, 04 Sep 2005 01:24:36 -0400
Message-Id: <1125811476.86211.19.camel@homey.my.domain>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.3 FreeBSD GNOME Team Port 
Content-Transfer-Encoding: 7bit
Subject: Setting Up IPMON Logging for IPFilter
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Sep 2005 05:24:45 -0000

I'm running FreeBSD 5.4-RELEASE #0 and intend to install IPFilter.
Section 25.5.7 IPMON Logging, of the FreeBSD Handbook, instructs you to
add the statement, "security.*  /var/log/ipfilter.log" to
the /etc/syslog.conf file.  etc/syslog.conf already includes a similar
statement, "security.*  /var/log/security".  Wouldn't this result in the
same security message posting to two different log files?

What am I missing?

Thnx,
Bob Perry