ipfilter question

2005-12-13 Thread Elmer Rivera
hello,

my freebsd box is already setup and followed some of the docs on
setting up the firewall using ipfilter. question on logging.

setup /var/log/ipfilter.log as  my log file.
modified syslog.conf. its working now unfortunately, its loggin on
that file AND to my messages log file. is it possible to log ipfilter
log only to my log file?

thanks
--
Elmer Rivera, http://www.vizcayano.com, http://youand.i.ph
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: ipfilter question

2005-12-13 Thread Elmer Rivera
#uname -a
FreeBSD hcggw1.hcg.com.ph 5.4-RELEASE-p8 FreeBSD 5.4-RELEASE-p8 #0:
Sat Dec 10 09:49:16 PHT 2005
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/HCGGW1  i386

  setup /var/log/ipfilter.log as  my log file.

 How/where did you set this up?

# touch /var/log/ipfilter.log

  modified syslog.conf.

 How did you modified this?

# vi /etc/syslog.conf

commented out old security.* and inserted a new line pointing to the file above.

--
#   Consult the syslog.conf(5) manpage.
*.err;kern.warning;auth.notice;mail.crit/dev/console
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err  
/var/log/messages
security.*  /var/log/ipfilter.log
#security.* /var/log/security
auth.info;authpriv.info /var/log/auth.log
mail.info   /var/log/maillog
--

  its working now unfortunately, its loggin on
  that file AND to my messages log file. is it possible to log ipfilter
  log only to my log file?

 Yes, it is possible.

# cat /etc/rc.conf
--
ipfilter_enable=YES
ipnat_enable=YES
ipmon_enable=YES
ipmon_flags=-Dsn

--

 Here's my setup:

 /etc/rc.conf
 ipmon_enable=YES
 ipmon_flags=-Dns

 /etc/syslog.conf
 security.*  /var/log/ipfilter.log


 Make sure you don't have any other security.* facility specified in
 /etc/syslog.conf

yes, there is no other security.* facility, actually i got it working
to log on my file (/var/log/ipfilter.log) but it also logs on
/var/log/messages. I only want to log on my file.


 
  thanks
  --
  Elmer Rivera, http://www.vizcayano.com, http://youand.i.ph
 

 Hope this helps,

 --
 Pietro Cerutti
 [EMAIL PROTECTED]

 Beansidhe - SwiSS Death / Thrash Metal
 www.beansidhe.ch

 Windows: Where do you want to go today?
 Linux: Where do you want to go tomorrow?
 FreeBSD: Are you guys coming or what?


regards

--
Elmer Rivera, http://www.vizcayano.com, http://youand.i.ph
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: ipfilter question

2005-12-13 Thread Elmer Rivera
Got it working. forgot to add security.none after *.notice;
Thanks guys...
--
Elmer Rivera, http://www.vizcayano.com, http://youand.i.ph
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]