Iptables in logiranje v konzolo
Matej Zerovnik - LeVaK
levak at planetq.org
Sat Jun 29 20:17:16 CEST 2002
Danes sem si naložil firewall, ki mi določene povezave logira. Syslog sem
nastimal tako, da mi logira v /var/log/firewall. Do tukaj vse OK. Moti me pa
to, da poleg tega da mi logira v file, mi logira tudi na konzolo(samo
lokalno, tisto ki je trenutno izbrana). Kako to izklopim? Uporabljam
syslog-ng
syslog-ng.cfg:
options { long_hostnames(off); sync(0); };
source src { unix-dgram("/dev/log"); internal(); file("/proc/kmsg"
log_prefix("kernel: ")); };
destination syslog { file("/var/log/syslog" owner("root") group("adm")
perm(0640)); };
destination mail { file("/var/log/mail" owner("root") group("adm")
perm(0640)); };
destination isdn { file("/var/log/isdn" owner("root") group("adm")
perm(0640)); };
destination call { file("/var/log/call" owner("root") group("adm")
perm(0640)); };
destination firewall { file("/var/log/firewall" owner("root") group("adm")
perm(0640)); };
destination console { usertty("root"); };
destination console_all { file("/dev/tty12"); };
destination console_mail { file("/dev/tty11"); };
filter f_syslog { not match("IN="); };
filter f_mail { facility(mail); };
filter f_isdn { facility(local2); };
filter f_call { facility(kern) and match("isdn_tty:"); };
filter f_firewall { facility(kern) and match("IN="); };
filter f_emergency { level(emerg); };
filter f_console_all { not match("in.qpopper") and not match("IN=") and not
facility(auth, authpriv, cron, mail); };
filter f_console_mail { facility(mail) and not match("in.qpopper"); };
log { source(src); filter(f_syslog); destination(syslog); };
log { source(src); filter(f_mail); destination(mail); };
log { source(src); filter(f_isdn); destination(isdn); };
log { source(src); filter(f_call); destination(call); };
log { source(src); filter(f_firewall); destination(firewall); };
log { source(src); filter(f_emergency); destination(console); };
log { source(src); filter(f_console_all); destination(console_all); };
log { source(src); filter(f_console_mail); destination(console_mail); };
Hvala za pomoč.
LeVaK
More information about the lugos-list
mailing list