> I have ipfilter set up and running fine, but I have been finding that my > security logs show up in both my security and messages log files. ipmon is > running with the command "ipmon -oI -s -D" and my syslog.conf file has the > following relevant configuration. > .. > local0.* /var/log/security > security.* /var/log/security > *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
I believe *.notice includes all the higher levels, such as *.err and *.warning. If you don't want messages from local0 and security facilities to appear in /var/log/messages, add this to /var/log/messages: local0.none;security.none -- Toomas Aas | [EMAIL PROTECTED] | http://www.raad.tartu.ee/~toomas/ * I haven't lost my mind; I know exactly where I left it. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
