From owner-freebsd-questions@FreeBSD.ORG Fri Jun 25 12:48:55 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 776DB16A4CE for ; Fri, 25 Jun 2004 12:48:55 +0000 (GMT) Received: from smtp17.wxs.nl (smtp17.wxs.nl [195.121.6.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2123C43D55 for ; Fri, 25 Jun 2004 12:48:55 +0000 (GMT) (envelope-from freebsd@akruijff.dds.nl) Received: from kruij557.speed.planet.nl (ipd50a97ba.speed.planet.nl [213.10.151.186]) by smtp17.wxs.nl (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0HZV003X77LGKS@smtp17.wxs.nl> for freebsd-questions@freebsd.org; Fri, 25 Jun 2004 14:48:52 +0200 (CEST) Received: from alex.lan (localhost [127.0.0.1]) by kruij557.speed.planet.nl (8.12.10/8.12.10) with ESMTP id i5PCmp3j002398; Fri, 25 Jun 2004 14:48:51 +0200 Received: (from akruijff@localhost) by alex.lan (8.12.10/8.12.10/Submit) id i5PCmnDr002397; Fri, 25 Jun 2004 14:48:49 +0200 Content-return: prohibited Date: Fri, 25 Jun 2004 14:48:49 +0200 From: Alex de Kruijff In-reply-to: To: Gareth Bailey Message-id: <20040625124849.GA895@alex.lan> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline User-Agent: Mutt/1.4.2.1i References: X-Authentication-warning: alex.lan: akruijff set sender to freebsd@akruijff.dds.nl using -f cc: freebsd-questions@freebsd.org Subject: Re: Ipmon & security log rotation X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2004 12:48:55 -0000 On Fri, Jun 25, 2004 at 02:15:50PM +0200, Gareth Bailey wrote: > I start ipmon at boot time with "/sbin/ipmon -D > /var/log/security". Ipmon works fine but seems to stop > logging entries to the security logfile when it is rotated. > > newsyslog.conf sets mode to 700, which should be fine since > ipmon is run as root (i think?) The file doesn't have to be executed so it should be 600. Cron runs newsyslog. It send the output by mail (root accound by default). What does the output say? > How could i correct this? This is my line: /var/log/security 600 3 100 * Z I don't run ipmon, so it could be that you need to give the pid file afther it. -- Alex Articles based on solutions that I use: http://www.kruijff.org/alex/FreeBSD/