October 2002 - syslog-ng - lists.balabit.hu

RE: [syslog-ng]syslog-ng stops logging after one or two entries.. ..
by Paul.Fiero＠ci.austin.tx.us 24 Oct '02

24 Oct '02

Drew, I don't know if you saw my last post but the problem is taken care of. Apparently what was happening is that the message that I am expecting to see on the syslog-ng system was the same each time and it wasn't displaying the message because it was identical. By changing the syntax of the command that generates the message I am logging it is different each time. It all works fine now. Paul -----Original Message----- From: Hamilton, Andrew [mailto:Andrew.Hamilton@afccc.af.mil] Sent: Thursday, October 24, 2002 1:07 PM To: syslog-ng(a)lists.balabit.hu Subject: RE: [syslog-ng]syslog-ng stops logging after one or two entries.. .. Paul, Could you post your configuration file? Drew -----Original Message----- From: Paul.Fiero(a)ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us] Sent: Thursday, October 24, 2002 1:23 PM To: syslog-ng(a)lists.balabit.hu Subject: RE: [syslog-ng]syslog-ng stops logging after one or two entries.. .. Drew, I am not getting a core and syslog-ng just pounds right along. Seems to log for other things, just not this traffic coming from the remote host. I have run syslog-ng with the -dv switch from a shell prompt and there seems to be little additional information that it wants to give me. I am still getting similar results....logs one or two messages from the remote machine then just sits there and continues logging other traffic. Paul -----Original Message----- From: Hamilton, Andrew [mailto:Andrew.Hamilton@afccc.af.mil] Sent: Thursday, October 24, 2002 12:04 PM To: syslog-ng(a)lists.balabit.hu Subject: RE: [syslog-ng]syslog-ng stops logging after one or two entries.. .. Paul, Shut the daemon down and run syslog-ng in a shell with the -dv switch. This will give you some debug information. Are you getting a core dump? You can use strace or truss to watch it if you want to run those and watch the system calls. Without a little more info it will be difficult to help you. Regards, Drew -----Original Message----- From: Paul.Fiero(a)ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us] Sent: Thursday, October 24, 2002 12:59 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]syslog-ng stops logging after one or two entries.... Importance: High I am new to syslog stuff but here is my problem. I have syslog-ng v1.5.21 running on a RedHat Linux server. I have a Mandrake 9 workstation running plain ole syslogd. The two boxes are talking to each other without a problem but when a message is sent to the syslog-ng box it will log the message once or twice but fails after that until syslog-ng and syslogd are restarted on both boxes. I am using this to log the status of an application on several boxes to this one server about 30 times an hour (yes it is huge overhead but is required for this application). I need help with this ASAP. Paul Fiero Information Security Analyst City of Austin - ISD Security Engineering (512) 974-3559 paul.fiero(a)ci.austin.tx.us CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

RE: [syslog-ng]syslog-ng stops logging after one or two entries.. ..
by Hamilton, Andrew 24 Oct '02

24 Oct '02

Paul, Could you post your configuration file? Drew -----Original Message----- From: Paul.Fiero(a)ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us] Sent: Thursday, October 24, 2002 1:23 PM To: syslog-ng(a)lists.balabit.hu Subject: RE: [syslog-ng]syslog-ng stops logging after one or two entries.. .. Drew, I am not getting a core and syslog-ng just pounds right along. Seems to log for other things, just not this traffic coming from the remote host. I have run syslog-ng with the -dv switch from a shell prompt and there seems to be little additional information that it wants to give me. I am still getting similar results....logs one or two messages from the remote machine then just sits there and continues logging other traffic. Paul -----Original Message----- From: Hamilton, Andrew [mailto:Andrew.Hamilton@afccc.af.mil] Sent: Thursday, October 24, 2002 12:04 PM To: syslog-ng(a)lists.balabit.hu Subject: RE: [syslog-ng]syslog-ng stops logging after one or two entries.. .. Paul, Shut the daemon down and run syslog-ng in a shell with the -dv switch. This will give you some debug information. Are you getting a core dump? You can use strace or truss to watch it if you want to run those and watch the system calls. Without a little more info it will be difficult to help you. Regards, Drew -----Original Message----- From: Paul.Fiero(a)ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us] Sent: Thursday, October 24, 2002 12:59 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]syslog-ng stops logging after one or two entries.... Importance: High I am new to syslog stuff but here is my problem. I have syslog-ng v1.5.21 running on a RedHat Linux server. I have a Mandrake 9 workstation running plain ole syslogd. The two boxes are talking to each other without a problem but when a message is sent to the syslog-ng box it will log the message once or twice but fails after that until syslog-ng and syslogd are restarted on both boxes. I am using this to log the status of an application on several boxes to this one server about 30 times an hour (yes it is huge overhead but is required for this application). I need help with this ASAP. Paul Fiero Information Security Analyst City of Austin - ISD Security Engineering (512) 974-3559 paul.fiero(a)ci.austin.tx.us CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

RE: [syslog-ng]syslog-ng stops logging after one or two entries.. ..
by Paul.Fiero＠ci.austin.tx.us 24 Oct '02

24 Oct '02

Problem resolved. Seems that syslog-ng was getting duplicate messages but wasn't telling me that. PFiero -----Original Message----- From: Hamilton, Andrew [mailto:Andrew.Hamilton@afccc.af.mil] Sent: Thursday, October 24, 2002 12:04 PM To: syslog-ng(a)lists.balabit.hu Subject: RE: [syslog-ng]syslog-ng stops logging after one or two entries.. .. Paul, Shut the daemon down and run syslog-ng in a shell with the -dv switch. This will give you some debug information. Are you getting a core dump? You can use strace or truss to watch it if you want to run those and watch the system calls. Without a little more info it will be difficult to help you. Regards, Drew -----Original Message----- From: Paul.Fiero(a)ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us] Sent: Thursday, October 24, 2002 12:59 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]syslog-ng stops logging after one or two entries.... Importance: High I am new to syslog stuff but here is my problem. I have syslog-ng v1.5.21 running on a RedHat Linux server. I have a Mandrake 9 workstation running plain ole syslogd. The two boxes are talking to each other without a problem but when a message is sent to the syslog-ng box it will log the message once or twice but fails after that until syslog-ng and syslogd are restarted on both boxes. I am using this to log the status of an application on several boxes to this one server about 30 times an hour (yes it is huge overhead but is required for this application). I need help with this ASAP. Paul Fiero Information Security Analyst City of Austin - ISD Security Engineering (512) 974-3559 paul.fiero(a)ci.austin.tx.us CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

RE: [syslog-ng]syslog-ng stops logging after one or two entries.. ..
by Paul.Fiero＠ci.austin.tx.us 24 Oct '02

24 Oct '02

Drew, I am not getting a core and syslog-ng just pounds right along. Seems to log for other things, just not this traffic coming from the remote host. I have run syslog-ng with the -dv switch from a shell prompt and there seems to be little additional information that it wants to give me. I am still getting similar results....logs one or two messages from the remote machine then just sits there and continues logging other traffic. Paul -----Original Message----- From: Hamilton, Andrew [mailto:Andrew.Hamilton@afccc.af.mil] Sent: Thursday, October 24, 2002 12:04 PM To: syslog-ng(a)lists.balabit.hu Subject: RE: [syslog-ng]syslog-ng stops logging after one or two entries.. .. Paul, Shut the daemon down and run syslog-ng in a shell with the -dv switch. This will give you some debug information. Are you getting a core dump? You can use strace or truss to watch it if you want to run those and watch the system calls. Without a little more info it will be difficult to help you. Regards, Drew -----Original Message----- From: Paul.Fiero(a)ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us] Sent: Thursday, October 24, 2002 12:59 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]syslog-ng stops logging after one or two entries.... Importance: High I am new to syslog stuff but here is my problem. I have syslog-ng v1.5.21 running on a RedHat Linux server. I have a Mandrake 9 workstation running plain ole syslogd. The two boxes are talking to each other without a problem but when a message is sent to the syslog-ng box it will log the message once or twice but fails after that until syslog-ng and syslogd are restarted on both boxes. I am using this to log the status of an application on several boxes to this one server about 30 times an hour (yes it is huge overhead but is required for this application). I need help with this ASAP. Paul Fiero Information Security Analyst City of Austin - ISD Security Engineering (512) 974-3559 paul.fiero(a)ci.austin.tx.us CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

RE: [syslog-ng]syslog-ng stops logging after one or two entries.. ..
by Hamilton, Andrew 24 Oct '02

24 Oct '02

Paul, Shut the daemon down and run syslog-ng in a shell with the -dv switch. This will give you some debug information. Are you getting a core dump? You can use strace or truss to watch it if you want to run those and watch the system calls. Without a little more info it will be difficult to help you. Regards, Drew -----Original Message----- From: Paul.Fiero(a)ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us] Sent: Thursday, October 24, 2002 12:59 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]syslog-ng stops logging after one or two entries.... Importance: High I am new to syslog stuff but here is my problem. I have syslog-ng v1.5.21 running on a RedHat Linux server. I have a Mandrake 9 workstation running plain ole syslogd. The two boxes are talking to each other without a problem but when a message is sent to the syslog-ng box it will log the message once or twice but fails after that until syslog-ng and syslogd are restarted on both boxes. I am using this to log the status of an application on several boxes to this one server about 30 times an hour (yes it is huge overhead but is required for this application). I need help with this ASAP. Paul Fiero Information Security Analyst City of Austin - ISD Security Engineering (512) 974-3559 paul.fiero(a)ci.austin.tx.us CONFIDENTIALITY NOTICE: ************************************************************************ The information contained in this ELECTRONIC MAIL transmission is confidential. It may also be privileged work product or proprietary information. This information is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution [other than to the addressee(s)], copying or taking of any action because of this information is strictly prohibited. ************************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

RE: [syslog-ng]centralized loghost
by Hamilton, Andrew 24 Oct '02

24 Oct '02

You have use_dns(no). Therefore the value of $HOST is the IP address. If you want the hostname instead then you need to turn on the use_dns option. Regards, Drew -----Original Message----- From: Guillaume LACHENAL [mailto:glachenal@on-x.com] Sent: Thursday, October 24, 2002 11:19 AM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]centralized loghost I've just install syslog-ng 1.5.21 for centralizing all servers log's Here is the conf file : - - syslog-ng.conf - - options { use_dns(no); sync(0); }; source s_internal { internal(); }; source net { udp( ip(192.168.12.2) port(514) ); }; destination hosts { file( "/var/log/$HOST/$YEAR/$MONTH/$DAY/$FACILITY"\ create_dirs(yes) owner("root") group("root")\ perm(0600) dir_perm(0700) ); }; log { source(s_internal); source(net); destination(hosts); }; - - the problem is that logs go to /var/log/IP_of_$HOST/ ... Thanks for help G. _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

centralized loghost
by Guillaume LACHENAL 24 Oct '02

24 Oct '02

I've just install syslog-ng 1.5.21 for centralizing all servers log's Here is the conf file : - - syslog-ng.conf - - options { use_dns(no); sync(0); }; source s_internal { internal(); }; source net { udp( ip(192.168.12.2) port(514) ); }; destination hosts { file( "/var/log/$HOST/$YEAR/$MONTH/$DAY/$FACILITY"\ create_dirs(yes) owner("root") group("root")\ perm(0600) dir_perm(0700) ); }; log { source(s_internal); source(net); destination(hosts); }; - - the problem is that logs go to /var/log/IP_of_$HOST/ ... Thanks for help G.

1 0

REPLY NEEDED_URGENT
by JAMES OGWU 24 Oct '02

24 Oct '02

DEAR SIR, STRICTLY CONFIDENTIAL WE ARE MEMBERS OF A SPECIAL COMMITTEE FOR BUDGET AND PLANNING OF THE NIGERIAN NATIONAL PETROLEUM CORPORATION (NNPC). THIS COMMITTEE IS PRINCIPALLY CONCERNED WITH CONTRACT AWARDS AND APPROVAL. WITH OUR POSITIONS, WE HAVE SUCCESSFULLY SECURED FOR OURSELVES THE SUM OF THIRTY ONE MILLION, FIVE HUNDRED THOUSAND UNITED STATES DOLLARS (US$31.5M). THIS AMOUNT WAS CAREFULLY MANIPULATED BY OVER-INVOICING OF AN OLD CONTRACT. BASED ON INFORMATION GATHERED ABOUT YOU, WE BELIEVE YOU WOULD BE IN A POSITION TO HELP US IN TRANSFERING THIS FUND (US$31.5M) INTO A SAFE ACCOUNT WHICH YOU HAVE ABSOLUTE CONTROL OVER. THIS IS VERY IMPORTANT. IT HAS BEEN AGREED THAT THE OWNER OF THE ACCOUNT WILL BE COMPENSATED WITH 30% OF THE REMITTED FUNDS, WHILE WE KEEP 60% AS THE INITIATORS AND 10% WILL BE SET ASIDE TO OFFSET EXPENSES AND PAY THE NECESSARY TAXES. WE INTEND TO USE PART OF OUR SHARE TO BUY AND IMPORT FROM YOUR COUNTRY, AGRICULTURAL AND CONSTRUCTION MACHINERY. WE SHALL ALSO NEED YOUR ASSISTANCE IN THIS REGARD ON A COMMISSION TO BE AGREED UPON WHEN WE COME OVER TO YOUR COUNTRY. IN ADDITION, WITH OUR EXPERIENCE AND CONNECTION IN THE OIL SECTOR OF MY COUNTRY, WE WOULD LIKE TO ESTABLISH A JOINT BUSINESS WITH YOU IN YOUR COUNTRY AFTER THIS TRANSACTION. THE PURPOSE BEING FOR YOU TO FRONT FOR US IN EXECUTING SOME GOVERNMENT CONTRACTS WHICH SHALL BE AWARDED THE FORMED COMPANY WITH OUR CONNECTIONS. ALL THESE WILL BE DISCUSS WHEN WE ARRIVE YOUR COUNTRY FOR THE DISBURSEMENT. ALL MODALITIES OF THIS TRANSACTION HAVE BEEN CAREFULLY WORKED OUT AND ONCE STARTED WILL NOT TAKE MORE THAN SEVEN (7) WORKING DAYS, WITH YOUR FULL SUPPORT. THIS TRANSACTION IS 100% RISK FREE. IF THIS PROPOSAL SATISFIES YOU, PLEASE REACH US BY EMAIL OR TELEPHONE; 234-80-23250079 FOR MORE INFORMATION. PLEASE, TREAT AS URGENT AND VERY IMPORTANT. YOURS FAITHFULLY, DR JAMES OGWU..

1 0

security patch for --chroot feature
by Scott Weikart 23 Oct '02

23 Oct '02

Here's a patch to make the --chroot feature more secure. 1) At least with the Linux kernel, root can break out of a chroot jail: http://www.linuxsecurity.com/feature_stories/feature_story-99.html [I verified this to be true with a 2.2 kernel.] I'm not sure whether this is true for other kernels, and I'm not sure whether other kernels require the process to be root before a chroot can succeed. So, my uid check may need to be ported. 2) With older Linux kernels, you could break out of a chroot jail if you didn't cd to the directory to which you will chroot. 3) I added checks to make sure that --user and/or --group work. The most important check is to make sure that setuid succeeds (if --chroot was specified). -scott p.s. I'm not (yet) subscribed to the list. ================================================================== --- main.c~ Wed Sep 4 07:52:25 2002 +++ main.c Sun Oct 13 15:37:46 2002 @@ -481,6 +481,15 @@ return 2; } if (chroot_dir) { + if (!uid) { + werror("-C can be defeated without -u, exitting.\n"); + return 3; + } + + if (chdir(chroot_dir) < 0) { + werror("Error chdiring, exiting.\n"); + return 3; + } if (chroot(chroot_dir) < 0) { werror("Error chrooting, exiting.\n"); return 3; @@ -488,9 +497,18 @@ } if (uid || gid) { - setgid(gid); - setgroups(0, NULL); - setuid(uid); + if (gid && setgid(gid) < 0) { + werror("Error setgiding, exiting.\n"); + return 4; + } + if (setgroups(0, NULL) < 0) { + werror("Error setgrouping, exiting.\n"); + return 4; + } + if (uid && setuid(uid) < 0) { + werror("Error setuiding, exiting.\n"); + return 4; + } } if (!debug_flag) {

3 2

Antwort: RE: [syslog-ng]syslog-ng and my console
by Franz.Bettag/SOFTWERK/DE%BIG＠big.de 22 Oct '02

22 Oct '02

options { long_hostnames(off); sync(0); }; source src { unix-stream("/dev/log"); internal(); file("/proc/kmsg" log_prefix("kernel: ")); }; destination authlog { file("/var/log/auth.log" owner("root") group("adm") perm(0640)); }; destination syslog { file("/var/log/syslog" owner("root") group("adm") perm(0640)); }; destination cron { file("/var/log/cron.log" owner("root") group("adm") perm(0640)); }; destination daemon { file("/var/log/daemon.log" owner("root") group("adm") perm(0640)); }; destination kern { file("/var/log/kern.log" owner("root") group("adm") perm(0640)); }; destination lpr { file("/var/log/lpr.log" owner("root") group("adm") perm(0640)); }; destination mail { file("/var/log/mail.log" owner("root") group("adm") perm(0640)); }; destination user { file("/var/log/user.log" owner("root") group("adm") perm(0640)); }; destination uucp { file("/var/log/uucp.log" owner("root") group("adm") perm(0640)); }; destination mailinfo { file("/var/log/mail.info" owner("root") group("adm") perm(0640)); }; destination mailwarn { file("/var/log/mail.warn" owner("root") group("adm") perm(0640)); }; destination mailerr { file("/var/log/mail.err" owner("root") group("adm") perm(0640)); }; destination debug { file("/var/log/debug" owner("root") group("adm") perm(0640)); }; destination messages { file("/var/log/messages" owner("root") group("adm") perm(0640)); }; destination iptables { file("/var/log/firewall.log" owner("root") group("adm") perm(0640)); }; destination emergency { file("/var/log/emergency.log" owner("root") group("adm") perm(0640)); }; filter f_iptables { match("FW->*"); }; filter f_authpriv { facility(auth, authpriv); }; filter f_syslog { not facility(auth, authpriv); }; filter f_cron { facility(cron); }; filter f_daemon { facility(daemon); }; filter f_kern { facility(kern); }; filter f_lpr { facility(lpr); }; filter f_mail { facility(mail); }; filter f_user { facility(user); }; filter f_uucp { facility(uucp); }; filter f_debug { not facility(auth, authpriv, news, mail); }; filter f_messages { level(info .. warn) and not facility(auth, authpriv, cron, daemon, mail, news); }; filter f_emergency { level(emerg); }; filter f_info { level(info); }; filter f_notice { level(notice); }; filter f_warn { level(warn); }; filter f_crit { level(crit); }; filter f_err { level(err); }; log { source(src); filter(f_iptables); destination(iptables); }; log { source(src); filter(f_authpriv); destination(authlog); }; log { source(src); filter(f_syslog); destination(syslog); }; log { source(src); filter(f_cron); destination(cron); }; log { source(src); filter(f_daemon); destination(daemon); }; log { source(src); filter(f_kern); destination(kern); }; log { source(src); filter(f_lpr); destination(lpr); }; log { source(src); filter(f_mail); destination(mail); }; log { source(src); filter(f_user); destination(user); }; log { source(src); filter(f_uucp); destination(uucp); }; log { source(src); filter(f_mail); filter(f_info); destination(mailinfo); }; log { source(src); filter(f_mail); filter(f_warn); destination(mailwarn); }; log { source(src); filter(f_mail); filter(f_err); destination(mailerr); }; log { source(src); filter(f_debug); destination(debug); }; log { source(src); filter(f_messages); destination(messages); }; log { source(src); filter(f_emergency); destination(emergency); }; log { source(src); filter(f_iptables); destination(iptables); }; Mit freundlichen Grüßen BIG-SPIELWARENFABRIK Dipl.-Ing. Ernst A. Bettag e. K. Franz Bettag http://www.BIG.de

1 0