Am Sonntag, 18. Juni 2006 22:43 schrieb Tom Eastep: > KP Kirchdoerfer wrote: > > Hi; > > > > Am Sonntag, 18. Juni 2006 22:13 schrieb Erich Titl: > >> Rob > >> > >> Rob Ogle wrote: > >> .. > >> > >>> I have posted to the shorewall list and Tom Eastep says this is a LEAF > >>> issue. > >> > >> Most of the time he is right > >> > >>> As one might have guessed, I'm under the gun to get this into > >>> production. > >>> > >>> Any ideas? > >> > >> Yup.... > >> > >> do you use ULOG > >> > >> Did you specify shorewall.log to be the logfile for ulogd > > > > I can confirm that once I delete /var/log/shorewall.log any shorewall > > command fails. > > > > It works perfectly well after reboot. And the occurs again, after > > deleting shorewall.log. > > > > It is strange; and I'm not that shure it's a LEAF pb... > > (I'm using 3.2 beta3 btw) > > Let me clarify. > > 1) /sbin/shorewall verifies that LOGFILE is set to an existing file each > time that it is run. That has always been the case. The purpose of the > LOGFILE setting is so that /sbin/shorewall knows where to find the log when > processing "show log", "logwatch" and "dump" commands. > > 2) The LOGFILE setting DOES NOT DETERMINE WHERE LOG MESSAGES GO. > > 3) As released from shorewall.net, the setting of LOGFILE is > LOGFILE=/var/log/messages. > 4) Rob is complaining that /var/log/shorewall.log doesn't exist. Since that > is not the default setting, I can only conclude that /var/log/shorewall.log > is a Leaf default setting so I further conclude that something in Leaf is > expected to create the file. > > 4) Under no circumstance does Shorewall EVER create the file named in > LOGFILE. > > So if Rob is logging Shorewall messages to some other log then he should > change the setting of LOGFILE.
It works to remove the logfile and to restart /etc/init.d/ulogd. So it's not a shorewall issue. In LEAF a user needs to load ulogd as well as shorewall. Erich and Eric has been closer to the point than me... kp ------------------------------------------------------------------------ leaf-user mailing list: [email protected] https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
