🚀 go-pugleaf

I don't know anything about ipchains, but I find it is gooood to split up
the syslog messages so it make it easier to find errors or particular
things. You could also use something like this to find out where ipchains is
reporting.

Here is the one I use at the moment:
=========================================
# Store general critical stuff in critical
#
*.=panic;kern.none                              /var/log/panic
*.=alert;kern.none                              /var/log/alert
*.=crit;kern.none                               /var/log/critical

# Kernel stuff here
#
kern.*                                          /var/log/kernel-info
kern.=crit                                      /var/log/kernel-crit
kern.=alert                                     /var/log/kernel-alert
kern.=panic                                     /var/log/kernel-panic

# Log all warnings and errors together
#
*.=warn,*.=err                                  /var/log/errors

# Log anything (except mail) of level info
# and notice. Don't log mail or private
# authentication messages!
*.=info,*.=notice;mail.none;authpriv.none;local1.none   /var/log/messages

# The authpriv file has restricted access.
authpriv.*                                      /var/log/secure

# Log all mail stuff in one place.
#
mail.*;mail.!=info                              /var/log/mail

# Save mail info here
#
mail.=info                                      /var/log/mail-info

# Everybody gets emergency messages, plus
# log them on another machine.
*.emerg                                         *

# Put all debug messages together

*.=debug                                        /var/log/debug

# Log all router things.

local1.*                                        /var/log/router
=========================================

Does this give the idea?
Greyman
graham@gmcs.com.au

HeTTaR wrote in message <36975AC2.2BFAB41A@uq.net.au>...
>I'm trying to figure out how I can get syslog to log messages from
>my ipchains setup to a file other than /var/log/messages. perferably
>something like /var/log/ipchains. I know that if it can be done I need
>to edit he /etc/syslog.conf file and add the appropriate information.
>However I ma uncertain of what to add and the man page gives me the
>impression it can't be done.
>
>so can this be done and if so how ?