Hi GertJan,
I got the SuSEfirewall2 customized as I desired. But now for the logging: the messages are kept in three files: /var/log/messages /var/log/firewall /var/log/warn
I banned the firewall messages from /var/log/warn in syslogd.conf with *.*;mail.none;news.none;kern.none -/var/log/messages as every kernel message is kept in /var/log/firewall with kern.* -/var/log/firewall
But for /var/log/warn the entries are *.=warn;*.=err -/var/log/warn *.crit /var/log/warn How can I ban the kern.crit messages from this last log? *.crit;kern.!=crit /var/log/warn seems not to work...
The loglevel for firewall is warn not crit
That's a good hint. I changed two lines in syslog.conf to: *.=warn;kern.!=warn;*.=err -/var/log/warn *.crit /var/log/warn And so I got what I desired! Nevertheless I will try syslog-ng (when I've got time...). Thanks, Dirk