KP Kirchdoerfer wrote:
> Hi;
> Am Sonntag, 18. Juni 2006 22:13 schrieb Erich Titl:
>> Rob
>>
>> Rob Ogle wrote:
>> ..
>>
>>> I have posted to the shorewall list and Tom Eastep says this is a LEAF
>>> issue.
>> Most of the time he is right
>>
>>> As one might have guessed, I'm under the gun to get this into production.
>>>
>>> Any ideas?
>> Yup....
>>
>> do you use ULOG
>>
>> Did you specify shorewall.log to be the logfile for ulogd
> 
> I can confirm that once I delete /var/log/shorewall.log any shorewall command 
> fails. 
> 
> It works perfectly well after reboot. And the occurs again, after deleting 
> shorewall.log. 
> 
> It is strange; and I'm not that shure it's a LEAF pb...
> (I'm using 3.2 beta3 btw)
>

Let me clarify.

1) /sbin/shorewall verifies that LOGFILE is set to an existing file each time
   that it is run. That has always been the case. The purpose of the LOGFILE
   setting is so that /sbin/shorewall knows where to find the log when
   processing "show log", "logwatch" and "dump" commands.

2) The LOGFILE setting DOES NOT DETERMINE WHERE LOG MESSAGES GO.

3) As released from shorewall.net, the setting of LOGFILE is
   LOGFILE=/var/log/messages.

4) Rob is complaining that /var/log/shorewall.log doesn't exist. Since that is
   not the default setting, I can only conclude that /var/log/shorewall.log is a
   Leaf default setting so I further conclude that something in Leaf is expected
   to create the file.

4) Under no circumstance does Shorewall EVER create the file named in LOGFILE.

So if Rob is logging Shorewall messages to some other log then he should change
the setting of LOGFILE.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to