Follwing is my /etc/syslog.conf:
Code:
# /etc/syslog.conf Configuration file for syslogd.
#
# For more information see syslog.conf(5)
# manpage.
# --------------------------------------------------------------------
# logging by priority
# --------------------------------------------------------------------
*.=crit /var/log/critical.log
*.=emerg /var/log/emergency.log
*.=err /var/log/error.log
*.=info;\
cron.none;\
kern.none;\
mail.none; /var/log/info.log
# --------------------------------------------------------------------
# --------------------------------------------------------------------
# logging by facility
# --------------------------------------------------------------------
auth,authpriv.* /var/log/auth.log
cron.* -/var/log/cron.log
daemon.* -/var/log/daemon.log
kern.=info -/var/log/kern.info
kern.*;kern.!=info; -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
news.crit /var/log/news/news.crit
news.err /var/log/news/news.err
news.notice -/var/log/news/news.notice
user.* -/var/log/user.log
uucp.* -/var/log/uucp.log
# --------------------------------------------------------------------
# --------------------------------------------------------------------
# logging to the virtual consoles (= display)
# --------------------------------------------------------------------
daemon,mail.*;\
news.=crit;news.=err;news.=notice;\
*.=debug;*.=info;\
*.=notice;*.=warn /dev/tty8
# --------------------------------------------------------------------
The packets are dropped that way:
iptables -A LOG_DROP -m limit --limit 12/minute -j LOG --log-level info
iptables -A LOG_DROP -j DROP
Following the /etc/syslog.conf I can see no reference why packets that are dropped are being displayed at the console.
Any help is greatly appreciated :-)
