From owner-freebsd-questions Tue Oct 1 23:35: 8 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0755E37B401 for ; Tue, 1 Oct 2002 23:35:07 -0700 (PDT) Received: from lv.raad.tartu.ee (lv.raad.tartu.ee [194.126.106.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6A53243E6A for ; Tue, 1 Oct 2002 23:35:05 -0700 (PDT) (envelope-from toomas.aas@raad.tartu.ee) Received: Message by Barricade lv.raad.tartu.ee with ESMTP id g926YxW16650; Wed, 2 Oct 2002 09:34:59 +0300 Message-Id: <200210020634.g926YxW16650@lv.raad.tartu.ee> Received: from SpoolDir by INFO (Mercury 1.48); 2 Oct 02 09:34:24 +0300 From: "Toomas Aas" Organization: Tartu City Government To: dweimer@dweimer.org, freebsd-questions@freebsd.org Date: Wed, 2 Oct 2002 09:34:23 +0300 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: ipmon syslogd problems In-reply-to: <200210012202.g91M2L90017541@dweimer.org> X-info: Headers changed by Barricade Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > I have ipfilter set up and running fine, but I have been finding that my > security logs show up in both my security and messages log files. ipmon is > running with the command "ipmon -oI -s -D" and my syslog.conf file has the > following relevant configuration. > .. > local0.* /var/log/security > security.* /var/log/security > *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages I believe *.notice includes all the higher levels, such as *.err and *.warning. If you don't want messages from local0 and security facilities to appear in /var/log/messages, add this to /var/log/messages: local0.none;security.none -- Toomas Aas | toomas.aas@raad.tartu.ee | http://www.raad.tartu.ee/~toomas/ * I haven't lost my mind; I know exactly where I left it. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message