From owner-freebsd-questions@FreeBSD.ORG Mon May 17 04:53:27 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F380F16A4CE for ; Mon, 17 May 2004 04:53:26 -0700 (PDT) Received: from mail02.infosat.net (mailout06.infosat.net [66.18.69.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2FD0543D64 for ; Mon, 17 May 2004 04:53:23 -0700 (PDT) (envelope-from blygar1@webmail.co.za) Received: from [66.18.70.48] (HELO mail01.infosat.net) by mail02.infosat.net (CommuniGate Pro SMTP 4.1.8) with ESMTP id 71502024 for freebsd-questions@freebsd.org; Mon, 17 May 2004 13:53:21 +0200 Received: from [196.31.69.30] (account blygar1@webmail.co.za) by mail01.infosat.net (CommuniGate Pro WebUser 4.1.8) with HTTP id 314570148 for freebsd-questions@freebsd.org; Mon, 17 May 2004 13:53:21 +0200 From: "Gareth Bailey" To: freebsd-questions@freebsd.org X-Mailer: CommuniGate Pro WebUser Interface v.4.1.8 Date: Mon, 17 May 2004 13:53:21 +0200 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit Subject: Re: ipmon logs to messages AND security X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 May 2004 11:53:27 -0000 Hi there, thanks for the sample rules and help in setting up IPF. I have restarted since making the changes to syslogd.conf. I HUP'd syslogd anyway, still no luck. All ipf logs go to security and messages! Can you think of anything else that i might do? Thanks Gareth On Mon, 17 May 2004 07:43:34 -0400 "JJB" wrote: > Changes to /etc/syslog.conf do not take effect until you > tell the > syslog task to re-read the conf file. You do that be > issuing an HUP > signal to the syslog task. Kill -HUP PID where PID is > the task > number from the ps ax command. > > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of > Gareth > Bailey > Sent: Monday, May 17, 2004 6:55 AM > To: freebsd-questions@freebsd.org > Subject: ipmon logs to messages AND security > > I have just installed IPFILTER as a replacement for IPFW. > All is great besides the fact that ipf logs are being > stored not only in /etc/security, but also /etc/messages. > I > don't want ipf logs in /etc/messages. > > In rc.conf, after enabling ipfilter i have the following > lines: > > ipmon_enable="YES" #Start ip monitor log > ipmon_flags="-Ds" #s=log to syslog, D=start as > daemon > > Then in syslogd.conf i have: > > *.notice;authpriv.none;local0.none;mail.crit > var/log/messages > > local0.* /var/log/security > > Shouldn't the local0.none prevent ipf logs from being > entered in messages? > > Where am i going wrong? > Thanks > Gareth > ____________________________________________________________________ > _ > For super low premiums ,click here > http://www.dialdirect.co.za/quote > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" _____________________________________________________________________ For super low premiums ,click here http://www.dialdirect.co.za/quote