[syslog-ng]new to syslog-ng (Fedora RPMS)

[Mike Pepe]

Hi Jose and everyone,

Thanks. I have sucessfully built syslog-ng from the srpms and it's up 
and running.

My whole reason for installing syslog-ng is to finally move all the 
firewall hits from /var/log/messages.

I think these should do it:

destination d_iptables   { file("/var/log/iptables"); };
filter f_iptables  { match("Inbound:"); };
log { source(s_sys); filter(f_iptables); destination(d_iptables); };

but it doesn't seem to. what am I missing?

Jose Pedro Oliveira wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Mike,
> 
> Although you may download the syslog-ng and libol SRPMs from this page,
> 
> ~   http://gsd.di.uminho.pt/jpo/software/RPMS/#SYSLOGNG
> 
> it wouldn't hurt to read the comments in the Fedora US/Extras
> bugzilla entries:
> 
> 
> Syslog-ng:
> ~   https://bugzilla.fedora.us/show_bug.cgi?id=1332
> 
> Libol :
> ~   https://bugzilla.fedora.us/show_bug.cgi?id=2014
> 
> 
> SELinux Warning:
> 
> ~  Don't install the syslog-ng binary RPM if you
> ~  are using the SELinux enforcing policy (default in FC3).
> 
> 
> Regards,
> jpo
> 
> Mike Pepe wrote:
> | Thanks for the tips,>>
> |> You should be using the rpm from here:
> |>
> |> https://bugzilla.fedora.us/show_bug.cgi?id=1332
> |>
> |> which Jose is actively working on.  Other rpm packages of syslog-ng
> |> have various minor problems.
> |>
> |> P.
> 
> |
> | Where can I find out about this RPM, and where to get the supporting
> | RPMs for it? (libol, etc)
> |
> | thanks again
> |
> | -Mike
> |
> | Philip J. Hollenback wrote:
> |
> |> Hi Mike,
> |>
> |> You should be using the rpm from here:
> |>
> |> https://bugzilla.fedora.us/show_bug.cgi?id=1332
> |>
> |> which Jose is actively working on.  Other rpm packages of syslog-ng
> |> have various minor problems.
> |>
> |> P.
> 
> 
> - --
> José Pedro Oliveira
> Departamento de Informática, Universidade do Minho
> Tel: +351 253 604470 * Fax: +351 253 604471
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFCE2+Ul0metZG9hRsRAgJQAJ9tGHz3cBYU+x9UVzFGKmOdE3WMxgCeKfNa
> TZDiz/8MMqLoXNgKmADtFm8=
> =zvuk
> -----END PGP SIGNATURE-----
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html