[CentOS] iptables logging

[Jens Grigel]

On Wed, 2005-05-25 at 13:07, Peter Farrow wrote:
> Hi john,
> 
> I want to stop it logging to *all* the consoles, and limit it to just 
> one of the virtual consoles if poss, it does log to var/log/messages as 
> well where I run a perl script to check for "naughtiness" so I am 
> covered in that respect, its just a pain with it logging to the console 
> when you want to use the console....
> 
> I actually found iptables still logs to the console whatever settings 
> you have in syslogd.conf and /etc/sysconfig/syslog.
> 
> I also found iptables still logs to the console even if you kill klogd 
> and syslogd altogether (how bizarre)...
> 
> So in the end I modified /etc/sysctl.conf and added this line:
> 
> kernel.printk = 3 4 1 7
> 
> then did a sysctl -p
> 
> and that seems to have done it.... while still logging fully to 
> /var/log/messages
> 
> P.
> 

Hi,

you could also modify the log statement of iptables using the options
  --log-level level
	Level of logging (numeric or see syslog.conf(5))
  --log-prefix prefix
	Prefix log messages with the specified prefix; up to 29 letters long,
and useful for distinguishing messages in the logs.

Use log-level 7 and assign a log-prefix of your choice. The high
log-level will already prevent the logs appear on the console with the
default dmesg setting of 4.

Then use syslog-ng instead of klogd/syslog to filter the logs on the
log-prefix and define a destination to the tty of your choice.


-- 

Jens Grigel

Citysavingsbank Munich, Germany
Dep. of Network and Security