Date: Mon, 17 May 2004 13:53:21 +0200 From: "Gareth Bailey" <blygar1@webmail.co.za> To: freebsd-questions@freebsd.org Subject: Re: ipmon logs to messages AND security Message-ID: <web-314570148@mail01.infosat.net> In-Reply-To: <MIEPLLIBMLEEABPDBIEGKEFCFOAA.Barbish3@adelphia.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi there, thanks for the sample rules and help in setting up IPF. I have restarted since making the changes to syslogd.conf. I HUP'd syslogd anyway, still no luck. All ipf logs go to security and messages! Can you think of anything else that i might do? Thanks Gareth On Mon, 17 May 2004 07:43:34 -0400 "JJB" <Barbish3@adelphia.net> wrote: > Changes to /etc/syslog.conf do not take effect until you > tell the > syslog task to re-read the conf file. You do that be > issuing an HUP > signal to the syslog task. Kill -HUP PID where PID is > the task > number from the ps ax command. > > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of > Gareth > Bailey > Sent: Monday, May 17, 2004 6:55 AM > To: freebsd-questions@freebsd.org > Subject: ipmon logs to messages AND security > > I have just installed IPFILTER as a replacement for IPFW. > All is great besides the fact that ipf logs are being > stored not only in /etc/security, but also /etc/messages. > I > don't want ipf logs in /etc/messages. > > In rc.conf, after enabling ipfilter i have the following > lines: > > ipmon_enable="YES" #Start ip monitor log > ipmon_flags="-Ds" #s=log to syslog, D=start as > daemon > > Then in syslogd.conf i have: > > *.notice;authpriv.none;local0.none;mail.crit > var/log/messages > > local0.* /var/log/security > > Shouldn't the local0.none prevent ipf logs from being > entered in messages? > > Where am i going wrong? > Thanks > Gareth > ____________________________________________________________________ > _ > For super low premiums ,click here > http://www.dialdirect.co.za/quote > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" _____________________________________________________________________ For super low premiums ,click here http://www.dialdirect.co.za/quote
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?web-314570148>