The first message is the connection reporting.

The second is notification of the connection established

The third is the delivery confirmation

I am not positive, but I suspect you can turn off the option to
acknowledge the delivery of alarms in the settings for delivery
notification.  That may kill the third message.

Also, if you add a filter before all other email access filters that
does not log or report emails to/from the firewall, that should probably
eliminate the first two; since it then relies on those filters to
deliver the log messages.  Otherwise, it relies on the filters in place
for normal mail monitoring.  And I suspect that is the main cause of
your issue.

Thanks,

Danny



-----Original Message-----
From: Roger Cornelius [mailto:[EMAIL PROTECTED]
Sent: Friday, October 13, 2006 11:40 AM
To: [email protected]
Cc: Roger Cornelius
Subject: [gb-users] Excessive GB-Ware logging

We're using GB-Ware 4.0.2 with remote logging turned on.  Each time the
firewall emails an alarm, it generates three syslog messages to report
the status:

Oct 13 14:14:13 gbox id=firewall time="2006-10-13 18:14:13"
fw="12100192" pri=6 msg="alarm: Connecting to email server"
dst=192.168.1.1 dstport=25

Oct 13 14:14:13 gbox id=firewall time="2006-10-13 18:14:13"
fw="12100192" pri=5 msg="alarm: Connected to email server successfully"
src=192.168.1.100 srcport=1170 dst=192.168.1.1 dstport=25

Oct 13 14:14:34 gbox id=firewall time="2006-10-13 18:14:34"
fw="12100192" pri=5 msg="alarm: Email alarms successfully sent"
dst=192.168.1.1 dstport=25

Is there a way to turn these messages off?
--
Roger Cornelius            [EMAIL PROTECTED]

------------------------------------------------------
To unsubscribe:           [EMAIL PROTECTED]
For additional commands:         [EMAIL PROTECTED]
Archive:  http://archives.gnatbox.com/gb-users/

------------------------------------------------------
To unsubscribe:           [EMAIL PROTECTED]
For additional commands:         [EMAIL PROTECTED]
Archive:  http://archives.gnatbox.com/gb-users/

Reply via email to