From owner-freebsd-security  Thu Jun 14 10:15:31 2001
Delivered-To: freebsd-security@freebsd.org
Received: from allmaui.com (server25.aitcom.net [208.234.0.10])
	by hub.freebsd.org (Postfix) with ESMTP id D9AB537B405
	for <freebsd-security@FreeBSD.ORG>; Thu, 14 Jun 2001 10:15:25 -0700 (PDT)
	(envelope-from craig@allmaui.com)
Received: from allmaui.com (pwnat-3-o.placeware.com [209.1.15.35])
	by allmaui.com (8.8.8/8.8.5) with ESMTP id NAA19393;
	Thu, 14 Jun 2001 13:15:22 -0400
Message-ID: <3B28F243.5FFE3706@allmaui.com>
Date: Thu, 14 Jun 2001 10:20:04 -0700
From: Craig Cowen <craig@allmaui.com>
X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: anindya <anindya@goonda.org>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: remote syslog question
References: <20010614123656.K55091-100000@phat.bastard.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

we simply have two lines for each facility.
One for remote logging and one for local logging.
local*.* has nothing to do with local logging.
It is an available facility for programs such as sudo which by default
uses local2.*.


Craig

anindya wrote:

> Hi folks,
>
>         I've been running a very nice 4.3-STABLE system with
> IPF as my firewall for some time now, without problems. Of
> course I am sending my syslogs to a remote host, but
> I want to keep an additional copy of the ipf logs locally.
> My syslog.conf has just 2 lines:
>
> *.*             @loghost
> local0.*        /var/log/ipflog
>
> I was guessing that the local0.* stuff would be sent to
> both places, but that is not the case; I don't get
> ipf logs on my loghost. What change do I need
> to make in order to send local0.* to both places?
> man 5 syslog.conf doesn't indicate that you can
> take multiple actions for a given facility/priority.
> <I know I can code up a proggie to pipe to which
> will do what I want, but I figure there must be
> an easier way.>
>
> Thanks,
> --Anindya
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message