iptables, changing log file from /var/log/messages

acid2000 · 03-11-2003, 01:19 PM

Is it possible to change the log file for iptables from /var/log/messages to something like /var/log/filewall? I've googled but can't find anything, thanks.

micxz · 03-11-2003, 01:47 PM

You could add something like this to "/etc/syslog.conf":

kern.* -/var/log/firewall

? hope this helps, but I think it will still log IPCHAINS/TABLES actions to messages unless you specify a specific rule for this.

acid2000 · 03-11-2003, 06:43 PM

What I really want is all iptables to go to one log file and not to messages.
Thanks

micxz · 03-11-2003, 08:38 PM

also try man syslog.conf

I see this in there might help:

# Log all mail.info and news.info messages to info
#
mail,news.=info /var/adm/info

This will extract all messages that come either with mail.info or with news.info and store them in the file
/var/adm/info.