Jan Engelhardt wrote:
On Nov 15 2007 15:31, Stephen Clark wrote:
Hello,
Is there a way to have iptables LOG using a facility other than "kern".
I would like to
segregate out the messages from iptables into a file separate from
/var/log/messages.
Any advice would be appreciated.
You should use syslog-ng, which allows text matching and filtering.
This is from a regular openSUSE install:
filter f_iptables { facility(kern) and match("IN=") and match("OUT="); };
Or, you can use the ULOG target together with ulogd2.
Hi Jan,
Thanks for taking the time to reply. I'll check them both out.
Steve
--
"They that give up essential liberty to obtain temporary safety,
deserve neither liberty nor safety." (Ben Franklin)
"The course of history shows that as a government grows, liberty
decreases." (Thomas Jefferson)
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html