http://bugzilla.novell.com/show_bug.cgi?id=593699 http://bugzilla.novell.com/show_bug.cgi?id=593699#c0 Summary: rsyslog logs on console Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: x86-64 OS/Version: openSUSE 11.2 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: novell-web@zmi.at QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.1.8) Gecko/20100204 SUSE/3.5.8-0.1.1 Firefox/3.5.8 I replaced syslog-ng with rsyslog, and now all logs from iptables are shown on the console. It's reproducible, re-starting syslog-ng stops console logging. I have the default config, which contains if ($syslogfacility-text == 'kern') and \ ($msg contains 'IN=' and $msg contains 'OUT=') then \ -/var/log/firewall;RSYSLOG_TraditionalFileFormat if ($syslogfacility-text == 'kern') and \ ($msg contains 'IN=' and $msg contains 'OUT=') then \ ~ I also tried with (the better) if ($syslogfacility-text == 'kern') and \ ($msg contains 'IN=' and $msg contains 'OUT=') then \ -/var/log/firewall;RSYSLOG_TraditionalFileFormat & ~ But anyway it's logged on the console. Googling showed me this page http://www.linux.org.za/Lists-Archives/glug-tech-1001/msg00009.html and really doing sysctl kernel.printk="4 4 1 7" stops console logging with rsyslog. But I don't want this, I want rsyslog to behave like syslog-ng. Any ideas how to disable iptables logs with rsyslog? BTW: the iptabes rule causing that log is $IPTABLES -A RULE_19 -j LOG --log-level info --log-prefix "lastdrop " --log-tcp-options --log-ip-options but as I said with syslog-ng it works correctly. Reproducible: Always Steps to Reproduce: 1. switch from syslog-ng to rsyslog 2. access PC so that an iptables log is generated 3. that entry shows up on the console Actual Results: iptables log appears on console Expected Results: shouldn't display iptables logs on console -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.