I've got an old SuSE 9.3 system that serves as a firewall/router/samba for a small office. I use ssh for maintenance. Recently I learned that on other systems there is a /var/log/auth.log that logs who is coming in.
On SuSE, all messages go to /var/log/messages (except for mail, which goes to /var/log/mail). Of course you can also log auth messages to a separate auth.log, just copy the lines from syslog-ng.conf from another system to your box and restart the syslog daemon (rcsyslog restart). But then they would be duplicated and I find it more convenient to have everything in one file, than looking for messages in the wrong file. Markus -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus(at)gaugusch.at X Against HTML Mail / \ --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org