syslog logging question

[John Murphy]

Wayne Pascoe <freebsd at penguinpowered.org.uk> wrote:

>I have ipfilter on some of my boxes. In /etc/syslog.conf, I have the
>following lines:
>
>!ipmon
>*.*                                             /var/log/ipf.log
>
>This works, and I get all entries in /var/log/ipf.log, which is good.
>The problem I have is that I also get all entries in /var/log/messages
>
>What do I need to do to stop syslog logging these messages to both
>locations and start logging only to /var/log/ipf.log ? 

I don't have an entry in syslog.conf for ipmon but I have:
ipmon_flags="-D /var/log/ipf.log"  # typically "-Ds" or "-D /var/log/ipflog"
in /etc/rc.conf

This way I don't see ipf log entries in /var/log/messages.

John.