RE: [suse-security] SuSE-Firewall logging

No it's not possible to log only the firewall messages to a separate file. These log entries come from the "kernel", and the filtering which can be done via syslog is not very extensive. You can basically only filter on what category (called "facility") the log entry is to be recorded as, and choices there are very limited. In this case, it's "kernel". That means that everything logged under "kernel" will always go to the same file. Sorry you can't filter on which program the log entry came from. The default setup when you install the SuSE firewal package is to log all "kernel" entries to /var/log/firewall. The rest stays in /var/log/messages. Alternatively, reduce the log level for your firewall setup. Volker