You got it! I wasn't loading ulogd.lrp. Once I did that everything was right with the world....I won the lottery, my wife gave me a key to the front door, my dog came home, etc.
Sorry for the trouble and thanks for the quick response! Fyi...I did search the mail archive and the online docs before posting. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of KP Kirchdoerfer Sent: Sunday, June 18, 2006 4:55 PM To: [email protected] Subject: Re: [leaf-user] LOGFILE does not exist Am Sonntag, 18. Juni 2006 22:43 schrieb Tom Eastep: > KP Kirchdoerfer wrote: > > Hi; > > > > Am Sonntag, 18. Juni 2006 22:13 schrieb Erich Titl: > >> Rob > >> > >> Rob Ogle wrote: > >> .. > >> > >>> I have posted to the shorewall list and Tom Eastep says this is a > >>> LEAF issue. > >> > >> Most of the time he is right > >> > >>> As one might have guessed, I'm under the gun to get this into > >>> production. > >>> > >>> Any ideas? > >> > >> Yup.... > >> > >> do you use ULOG > >> > >> Did you specify shorewall.log to be the logfile for ulogd > > > > I can confirm that once I delete /var/log/shorewall.log any > > shorewall command fails. > > > > It works perfectly well after reboot. And the occurs again, after > > deleting shorewall.log. > > > > It is strange; and I'm not that shure it's a LEAF pb... > > (I'm using 3.2 beta3 btw) > > Let me clarify. > > 1) /sbin/shorewall verifies that LOGFILE is set to an existing file > each time that it is run. That has always been the case. The purpose > of the LOGFILE setting is so that /sbin/shorewall knows where to find > the log when processing "show log", "logwatch" and "dump" commands. > > 2) The LOGFILE setting DOES NOT DETERMINE WHERE LOG MESSAGES GO. > > 3) As released from shorewall.net, the setting of LOGFILE is > LOGFILE=/var/log/messages. > 4) Rob is complaining that /var/log/shorewall.log doesn't exist. Since > that is not the default setting, I can only conclude that > /var/log/shorewall.log is a Leaf default setting so I further conclude > that something in Leaf is expected to create the file. > > 4) Under no circumstance does Shorewall EVER create the file named in > LOGFILE. > > So if Rob is logging Shorewall messages to some other log then he > should change the setting of LOGFILE. It works to remove the logfile and to restart /etc/init.d/ulogd. So it's not a shorewall issue. In LEAF a user needs to load ulogd as well as shorewall. Erich and Eric has been closer to the point than me... kp ------------------------------------------------------------------------ leaf-user mailing list: [email protected] https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/ ------------------------------------------------------------------------ leaf-user mailing list: [email protected] https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
