🚀 go-pugleaf

hmm yes and now. I do have my system logs partially broken up. what I'm
not sure how to do
is to get messages such as

Jan 12 10:27:16 milamber kernel: Packet log: external ACCEPT ppp0
PROTO=6 203.37.45.2:1685 203.101.228.67:23 L=52 S=0x00 I=9709 F=0x4000
T=57 

which comes from the kernel but is related to the ipchains firewall to
log to a give log 
file other than /var/log/messages or where ever you tell kernel messages
to log too.

HeTTaR
M&D Eaton
hettar@uq.net.au


greyman wrote:
> 
> I don't know anything about ipchains, but I find it is gooood to split up
> the syslog messages so it make it easier to find errors or particular
> things. You could also use something like this to find out where ipchains is
> reporting.
> 
> Here is the one I use at the moment:
> =========================================
> # Store general critical stuff in critical
> #
> *.=panic;kern.none                              /var/log/panic
> *.=alert;kern.none                              /var/log/alert
> *.=crit;kern.none                               /var/log/critical
> 
> # Kernel stuff here
> #
> kern.*                                          /var/log/kernel-info
> kern.=crit                                      /var/log/kernel-crit
> kern.=alert                                     /var/log/kernel-alert
> kern.=panic                                     /var/log/kernel-panic
> 
> # Log all warnings and errors together
> #
> *.=warn,*.=err                                  /var/log/errors
> 
> # Log anything (except mail) of level info
> # and notice. Don't log mail or private
> # authentication messages!
> *.=info,*.=notice;mail.none;authpriv.none;local1.none   /var/log/messages
> 
> # The authpriv file has restricted access.
> authpriv.*                                      /var/log/secure
> 
> # Log all mail stuff in one place.
> #
> mail.*;mail.!=info                              /var/log/mail
> 
> # Save mail info here
> #
> mail.=info                                      /var/log/mail-info
> 
> # Everybody gets emergency messages, plus
> # log them on another machine.
> *.emerg                                         *
> 
> # Put all debug messages together
> 
> *.=debug                                        /var/log/debug
> 
> # Log all router things.
> 
> local1.*                                        /var/log/router
> =========================================
> 
> Does this give the idea?
> Greyman
> graham@gmcs.com.au
> 
> HeTTaR wrote in message <36975AC2.2BFAB41A@uq.net.au>...
> >I'm trying to figure out how I can get syslog to log messages from
> >my ipchains setup to a file other than /var/log/messages. perferably
> >something like /var/log/ipchains. I know that if it can be done I need
> >to edit he /etc/syslog.conf file and add the appropriate information.
> >However I ma uncertain of what to add and the man page gives me the
> >impression it can't be done.
> >
> >so can this be done and if so how ?