Re: [suse-security] Logging to /var/log/firewall

Ryan Allen wrote:

I've been trying to get ONLY FIREWALL messages to go in /var/log/firewall and all the rest of the kernel messages in /var/log/messages.

I've scanned the past archives and found a few ideas, the most promising was adding this to /etc/syslog.conf:

*.*;!kern.* - /var/log/messages kern.* - /var/log/firewall

*.*;mail.none;news.none -/var/log/messages ^^

^ Is this a space? If so delete it, so that the hyphen is immediatly followed by the filename. like this Peter