Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Im tinkering with my iptables logging at the moment. So I got my syslog to use another log file with tips from the web. basically you end up changing some chains and rules plus aan extra line in the /etc/syslog.conf

kern.warning /var/log/iptables.log

But I get a strange feeling with this. I know why you need to do it like this because iptables is a kernel thing. BUT I cant shake the feeling that something else that produces a kernel warning is also gonna log to this file? I cant really find a clear explanation about this. It just doesnt feel clean.. mayb its just my adminautism kickin in

thanks in advance Koen

share|improve this question
add comment

1 Answer 1

up vote 0 down vote accepted

You are correct about this. All Kernel warnings will now be logged to iptables.log. Unfortunately, there's no better way to do this with classic syslogd as it's only able to filter kernel messages via priority.

To get a better syslog filtering, you will have to use a different syslog service like rsyslogd. There's more information in this blogpost.

share|improve this answer
    
super! thanks! to bad tho:( –  Koen van der Rijt Nov 28 '13 at 10:56
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.