Firewall logs in logs and terminal...

robbow52 · 11-20-2004, 07:01 AM

I have Firestarter installed and the logs generated are clogging both the terminals as well as the log files. It's especially troubling when I'm in a tty trying to do something and all at once the output of Firestarter/iptables shows up on the command line!! It's not an issue when I'm in a terminal in X...

Is there anything I can do to eliminate this?

Thanks in advance!

gug · 11-20-2004, 08:19 AM

Comment out the appropriate console or tty line of /etc/syslog.conf ?

robbow52 · 11-20-2004, 03:54 PM

Quote:

Originally posted by gug
Comment out the appropriate console or tty line of /etc/syslog.conf ?

I just spend a little time looking at that (and studying the man page), but I can find nothing in the configuration file that is directing the output to the console. This is the one that I'm bugged with the most. The only tty, /dev/tty8 is commented out in /ect/syslog.conf... It would also appear that the output is "only" being directed to tty1...

Thanks for the idea and I will explore it further.

Do you have any thoughts on why the output is going to "all" the tty's (except for the xconsole terminal windows???)?

gug · 11-20-2004, 04:06 PM

I'm out of ideas for the moment then.

Any Debian users reading who can see why syslog output should be going to all ttys?

robbow52 · 11-20-2004, 04:55 PM

Quote:

Originally posted by robbow52
I just spend a little time looking at that (and studying the man page), but I can find nothing in the configuration file that is directing the output to the console. This is the one that I'm bugged with the most. The only tty, /dev/tty8 is commented out in /ect/syslog.conf... It would also appear that the output is "only" being directed to tty1...

Thanks for the idea and I will explore it further.

Do you have any thoughts on why the output is going to "all" the tty's (except for the xconsole terminal windows???)?

I wanted to edit my earlier post above (I hit the send button too quickly!). The output appears to only be directed to tty1.

Any thoughts or ideas would be appreciated!

gug · 11-20-2004, 06:07 PM

is it ALL syslog output you are seeing on tty1 or just firestarter/iptables log?

(if you've got logger installed, try "logger hello world")

Dead Parrot · 11-20-2004, 06:44 PM

There's a utility called "ulogd" that redirects firewall log to a separate file. See my post in macondo's sticky thread "Debian Configuration Post-Install" (first page) where I describe how to use ulogd with FireHOL firewall. I don't use Firestarter, but if you discover how to make ulogd work with Firestarter, please post it here for us to read.

robbow52 · 11-20-2004, 07:13 PM

Quote:

Originally posted by Dead Parrot
There's a utility called "ulogd" that redirects firewall log to a separate file. See my post in macondo's sticky thread "Debian Configuration Post-Install" (first page) where I describe how to use ulogd with FireHOL firewall. I don't use Firestarter, but if you discover how to make ulogd work with Firestarter, please post it here for us to read.

I just read your post in the thread and I will look into ulogd. It sounds like just what I need.

I will post if I find a solution!

Thanks again!