On Sat, 07 Sep 2002 15:43:03 -0700
Stephen Rasku <[EMAIL PROTECTED]> wrote:

> I am in the process of debugging my firewall so I am logging every
> packet received.  However, it is logging to the screen in addition
> to logging to a file. It doesn't matter which virtual terminal I
> switch to; I still see the firewall messages.  I only want it to log
> to a file.  Any ideas on how to accomplish this? 
> 
> I am running iptables on Red Hat 7.1.  I have attached my
> syslog.conf.
> 
> 
> [syslog.conf  text/plain (893 bytes)]
> # Log all kernel messages to the console.
> # Logging much else clutters up the screen.
> kern.*                                                        /var/log/messages
> 
> # Log anything (except mail) of level info or higher.
> # Don't log private authentication messages!
> *.info;mail.none;authpriv.none;cron.none              /var/log/messages
> 
> # The authpriv file has restricted access.
> authpriv.*                                            /var/log/secure
> 
> # Log all the mail messages in one place.
> mail.*                                                        /var/log/maillog
> 
> 
> # Log cron stuff
> cron.*                                                        /var/log/cron
> 
> # Everybody gets emergency messages, plus log them on another
> # machine.
> *.emerg                                                       *
> 
> # Save mail and news errors of level err and higher in a
> # special file.
> uucp,news.crit                                                /var/log/spooler
> 
> # Save boot messages also to boot.log
> local7.*                                              /var/log/boot.log
> 

My RedHat 7.0 /etc/syslog.conf has a default setting to log kernel
messages to /dev/console, but this line is commented out. 
Is it possible that you HAD been logging to /dev/console, then changed
it to log to a file (/var/log/messages) without restarting the syslogd
daemon with:

   /etc/rc.d/init.d/syslog restart

Just a shot in the dark.........

                          Regards,

                           Tom



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to