Hi john, I want to stop it logging to *all* the consoles, and limit it to just one of the virtual consoles if poss, it does log to var/log/messages as well where I run a perl script to check for "naughtiness" so I am covered in that respect, its just a pain with it logging to the console when you want to use the console.... I actually found iptables still logs to the console whatever settings you have in syslogd.conf and /etc/sysconfig/syslog. I also found iptables still logs to the console even if you kill klogd and syslogd altogether (how bizarre)... So in the end I modified /etc/sysctl.conf and added this line: kernel.printk = 3 4 1 7 then did a sysctl -p and that seems to have done it.... while still logging fully to /var/log/messages P. John Logsdon wrote: >Peter > >This isn't exactly what you want but for one I can never understand >sending things to the console where they just scroll off the top. In the >days of computer rooms, slow teletype messages and loads of operators it >may have made sense but these days things happen so quickly that you >sometimes need to go back and analyse it. > >So it is better IMHO to log to a file and tail -f in a shell if you really >need the info all the time. For this, try syslog-ng - you can filter the >stuff you want right from the socket. So you can make an iptables log file >for example and anything else which can be stored of rotated as you wish. >It works on my server nicely. > >Best wishes > >John > >John Logsdon "Try to make things as simple >Quantex Research Ltd, Manchester UK as possible but not simpler" >j.logsdon at quantex-research.com a.einstein at relativity.org >+44(0)161 445 4951/G:+44(0)7717758675 www.quantex-research.com > > >On Wed, 25 May 2005, Peter Farrow wrote: > > > >>Hi All, >> >>A few years ago I was asked if I could redirect console messages from >>Iptables to a different virtual console, on RedHat 7.3 . I managed to >>do it, but can't remember how I did it, now that the same question has >>arisen ona Centos 3.4 box. >> >>I edited /etc/syslog.conf and redirected kern.* to /dev/tty2 for example >>& this didn't work >>I edited /etc/sysconfig/syslog and modified klogd options with -f >>/dev/tty2 & this didn't work either >> >>So I stopped syslogd and klogd altogether and iptables still logs to the >>current console (which ever one you're on). >> >>So my question is, how do I get iptables to redirect its output to >>another console? >> >>P. >> >> >>______________________________________________________________________ >>This email has been scanned by the MessageLabs Email Security System. >>For more information please visit http://www.messagelabs.com/email >>______________________________________________________________________ >>_______________________________________________ >>CentOS mailing list >>CentOS at centos.org >>http://lists.centos.org/mailman/listinfo/centos >> >> >> > >_______________________________________________ >CentOS mailing list >CentOS at centos.org >http://lists.centos.org/mailman/listinfo/centos > > ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________