ipfilter question

Elmer Rivera elmer.rivera at gmail.com
Tue Dec 13 16:25:07 PST 2005


#uname -a
FreeBSD hcggw1.hcg.com.ph 5.4-RELEASE-p8 FreeBSD 5.4-RELEASE-p8 #0:
Sat Dec 10 09:49:16 PHT 2005    
root at hcggw1.hcg.com.ph:/usr/obj/usr/src/sys/HCGGW1  i386

> > setup /var/log/ipfilter.log as  my log file.
>
> How/where did you set this up?

# touch /var/log/ipfilter.log

> > modified syslog.conf.
>
> How did you modified this?

# vi /etc/syslog.conf

commented out old security.* and inserted a new line pointing to the file above.

--
#       Consult the syslog.conf(5) manpage.
*.err;kern.warning;auth.notice;mail.crit                /dev/console
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err  
/var/log/messages
security.*                                      /var/log/ipfilter.log
#security.*                                     /var/log/security
auth.info;authpriv.info                         /var/log/auth.log
mail.info                                       /var/log/maillog
--
>
> > its working now unfortunately, its loggin on
> > that file AND to my messages log file. is it possible to log ipfilter
> > log only to my log file?
>
> Yes, it is possible.

# cat /etc/rc.conf
--
ipfilter_enable="YES"
ipnat_enable="YES"
ipmon_enable="YES"
ipmon_flags="-Dsn"

--

> Here's my setup:
>
> /etc/rc.conf
> ipmon_enable="YES"
> ipmon_flags="-Dns"
>
> /etc/syslog.conf
> security.*          /var/log/ipfilter.log
>
>
> Make sure you don't have any other security.* facility specified in
> /etc/syslog.conf

yes, there is no other security.* facility, actually i got it working
to log on my file (/var/log/ipfilter.log) but it also logs on
/var/log/messages. I only want to log on my file.

>
> >
> > thanks
> > --
> > Elmer Rivera, http://www.vizcayano.com, http://youand.i.ph
> >
>
> Hope this helps,
>
> --
> Pietro Cerutti
> <pietro.cerutti at gmail.com>
>
> Beansidhe - SwiSS Death / Thrash Metal
> <www.beansidhe.ch>
>
> Windows: "Where do you want to go today?"
> Linux: "Where do you want to go tomorrow?"
> FreeBSD: "Are you guys coming or what?"
>

regards

--
Elmer Rivera, http://www.vizcayano.com, http://youand.i.ph


More information about the freebsd-questions mailing list