Logging to the screen

Logging to the screen

[Scott Mayo]

I just noticed that my fireall is sending some of my LOGs to the screen. 
  I had tried setting something up a while back to LOG certain things, 
and was not sure if it was working or not.  Today, I went to the actual 
firewall itself and see all this info that I had my IPTABLES log, on the 
screen.  Any reason why it is not sending it to the /var/log/messages?
Thanks.
-- 
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.

Re: Logging to the screen

[/dev/rob0]

On Tuesday 2005-November-22 12:16, Scott Mayo wrote:
> the actual firewall itself and see all this info that I had my
> IPTABLES log, on the screen.  Any reason why it is not sending it to
> the /var/log/messages? Thanks.

The answer is in your LOG rules (--log-level) and syslog.conf(5). LOG 
uses syslog(2) facility "kern" and priority as set in --log-level 
(default is probably "info".)
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header

Re: Logging to the screen

[Marc Haber]

On Tue, Nov 22, 2005 at 12:16:20PM -0600, Scott Mayo wrote:
> I just noticed that my fireall is sending some of my LOGs to the screen. 
>  I had tried setting something up a while back to LOG certain things, 
> and was not sure if it was working or not.  Today, I went to the actual 
> firewall itself and see all this info that I had my IPTABLES log, on the 
> screen.  Any reason why it is not sending it to the /var/log/messages?

It should be sending to syslog via klogd, if you have that properly
set up. To keep it from logging to the console, set sysctl
kernel.printk to something like 2 4 1 7

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835

Re: Logging to the screen

[Scott Mayo]

/dev/rob0 wrote:
> On Tuesday 2005-November-22 12:16, Scott Mayo wrote:
> 
>>the actual firewall itself and see all this info that I had my
>>IPTABLES log, on the screen.  Any reason why it is not sending it to
>>the /var/log/messages? Thanks.
> 
> 
> The answer is in your LOG rules (--log-level) and syslog.conf(5). LOG 
> uses syslog(2) facility "kern" and priority as set in --log-level 
> (default is probably "info".)

Thanks for the info.  I got to reading the man pages on syslog.  My 
iptables were logging with the value 'debug'.  From what I read, if I 
understand this correctly, that will cause syslog to send the message to 
the screen.  I changed my iptables to a log-level of 'info' and it is 
now sending the messages to /var/log/messages.

Thanks again.

-- 
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.

Re: Logging to the screen

[/dev/rob0]

On Monday 2005-November-28 08:41, Scott Mayo wrote:
> Thanks for the info.  I got to reading the man pages on syslog.  My
> iptables were logging with the value 'debug'.  From what I read, if I
> understand this correctly, that will cause syslog to send the message
> to the screen.  I changed my iptables to a log-level of 'info' and it

Yikes, debug level to the screen? Normally it should only be serious 
messages going to the screen. My syslog.conf has *.emerg only to 
console.

> Thanks again.

NP.
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header