ipmon logs to messages AND security

[Gareth Bailey]

Hi there, thanks for the sample rules and help in setting
up IPF.

I have restarted since making the changes to syslogd.conf.
I HUP'd syslogd anyway, still no luck. All ipf logs go to
security and messages!

Can you think of anything else that i might do?

Thanks
Gareth

On Mon, 17 May 2004 07:43:34 -0400
 "JJB" <Barbish3 at adelphia.net> wrote:
> Changes to /etc/syslog.conf do not take effect until you
> tell the
> syslog task to re-read the conf file. You do that be
> issuing an HUP
> signal to the syslog task. Kill -HUP PID  where PID is
> the task
> number from the ps ax command.
> 
> -----Original Message-----
> From: owner-freebsd-questions at freebsd.org
> [mailto:owner-freebsd-questions at freebsd.org]On Behalf Of
> Gareth
> Bailey
> Sent: Monday, May 17, 2004 6:55 AM
> To: freebsd-questions at freebsd.org
> Subject: ipmon logs to messages AND security
> 
> I have just installed IPFILTER as a replacement for IPFW.
> All is great besides the fact that ipf logs are being
> stored not only in /etc/security, but also /etc/messages.
> I
> don't want ipf logs in /etc/messages.
> 
> In rc.conf, after enabling ipfilter i have the following
> lines:
> 
> ipmon_enable="YES"        #Start ip monitor log
> ipmon_flags="-Ds"         #s=log to syslog, D=start as
> daemon
> 
> Then in syslogd.conf i have:
> 
> *.notice;authpriv.none;local0.none;mail.crit
> var/log/messages
> 
> local0.* /var/log/security
> 
> Shouldn't the local0.none prevent ipf logs from being
> entered in messages?
> 
> Where am i going wrong?
> Thanks
> Gareth
>
____________________________________________________________________
> _
> For super low premiums ,click here
> http://www.dialdirect.co.za/quote
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"

_____________________________________________________________________
For super low premiums ,click here http://www.dialdirect.co.za/quote