Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Jun 2001 11:53:05 -0700
From:      "Crist Clark" <crist.clark@globalstar.com>
To:        anindya <anindya@goonda.org>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: remote syslog question
Message-ID:  <3B2BAB11.99A0E52C@globalstar.com>
References:  <20010614161245.D56348-100000@phat.bastard.net>

next in thread | previous in thread | raw e-mail | index | archive | help
anindya wrote:
> 
> Fernando P . Schapachnik provided me the answer in email: simply
> swap the order of the lines in syslog.conf. Apparently syslogd
> matches does specific match first, then processes the rules
> top-to-bottom. I knew it had to be something simple ;)
> 
> BTW, local0 is the default facility that ipfilter uses,
> which is why I am using it in my examples.

I have been trying to reproduce this problem on a FreeBSD-STABLE
box, but have been unable to. Whether I put,

  local0.*				/var/log/local0.log
  *.*					/var/log/all.log

Or,

  *.*					/var/log/all.log
  local0.*				/var/log/local0.log

In syslog.conf, I get the same results.
-- 
Crist J. Clark                                Network Security Engineer
crist.clark@globalstar.com                    Globalstar, L.P.
(408) 933-4387                                FAX: (408) 933-4926

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B2BAB11.99A0E52C>