Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Oct 2002 11:20:55 -0000
From:      "Dean E. Weimer" <dweimer@dweimer.org>
To:        "Toomas Aas" <toomas.aas@raad.tartu.ee>, <freebsd-questions@freebsd.org>
Subject:   Re: ipmon syslogd problems
Message-ID:  <200210021120.g92BKt0g044927@dweimer.org>
In-Reply-To: <200210020634.g926YxW16650@lv.raad.tartu.ee>

next in thread | previous in thread | raw e-mail | index | archive | help
Toomas Aas <toomas.aas@raad.tartu.ee> said:

> > I have ipfilter set up and running fine, but I have been finding that my 
> > security logs show up in both my security and messages log files.  ipmon 
is 
> > running with the command "ipmon -oI -s -D" and my syslog.conf file has 
the 
> > following relevant configuration.
> > ..
> > local0.*                                        /var/log/security
> > security.*                                      /var/log/security
> > *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
> 
> I believe *.notice includes all the higher levels, such as *.err and 
> *.warning.
> 
> If you don't want messages from local0 and security facilities to 
> appear in /var/log/messages, add this to /var/log/messages:
> 
> local0.none;security.none
> 

Looking at the man page for syslog I see the line that I missed before that 
talks about the special facility log level "none".  One thing to note, if 
you put it before the *.notice, you still get the messages, but putting it 
on the end of the line works.

> --
> Toomas Aas | toomas.aas@raad.tartu.ee | http://www.raad.tartu.ee/~toomas/
> * I haven't lost my mind; I know exactly where I left it.
> 
> 



-- 
Thanks,
  Dean E. Weimer
  http://www.dweimer.org/



________________________________________________________________

This message was sent from dweimer.org using TWIG
  - The Web Information Gateway.
  - For more information visit http://www.dweimer.org/
  - To Report Abuse Contact dweimer@dweimer.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210021120.g92BKt0g044927>