[leaf-commits] src/bering-uclibc4/source/etc syslog-ng.conf, 1.5, 1.6

david M brooke <[email protected]> Mon, 01 Nov 2010 12:00:20 +0000
Newsgroups gmane.linux.leaf.cvs
Message-ID <[email protected]>
Update of /cvsroot/leaf/src/bering-uclibc4/source/etc
In directory sfp-cvsdas-2.v30.ch3.sourceforge.com:/tmp/cvs-serv30428

Modified Files:
	syslog-ng.conf 
Log Message:
Added Shorewall and Shorewall6 iptables logs

Index: syslog-ng.conf
===================================================================
RCS file: /cvsroot/leaf/src/bering-uclibc4/source/etc/syslog-ng.conf,v
retrieving revision 1.5
retrieving revision 1.6
diff -C2 -d -r1.5 -r1.6
*** syslog-ng.conf	29 Oct 2010 16:53:19 -0000	1.5
--- syslog-ng.conf	1 Nov 2010 12:00:18 -0000	1.6
***************
*** 115,118 ****
--- 115,122 ----
  destination df_news_dot_crit { file("/var/log/news/news.crit" owner("news")); };
  
+ # separate files for Shorewall and Shorewall6 iptables logs
+ destination df_shorewall { file("/var/log/shorewall.log"); };
+ destination df_shorewall6 { file("/var/log/shorewall6.log"); };
+ 
  # some more classical and useful files found in standard syslog configurations
  destination df_debug { file("/var/log/debug"); };
***************
*** 182,185 ****
--- 186,195 ----
  };
  
+ # filters for Shorewall and Shorewall6 iptables logs
+ #   check for IPv4-style SRC address e.g. SRC=192.
+ filter f_shorewall { match("Shorewall:.*SRC=[[:digit:]]*\\."); };
+ #   check for IPv6-style SRC address e.g. SRC=2a01:
+ filter f_shorewall6 { match("Shorewall:.*SRC=[[:xdigit:]]*:"); };
+ 
  
  ######
***************
*** 188,191 ****
--- 198,218 ----
  # "log" statement
  
+ # logs for Shorewall and Shorewall6 iptables logs
+ # first in the list and using "flags(final);" to avoid repeated entries in
+ # syslog, kern.log, messages
+ log {
+         source(s_all);
+         filter(f_shorewall);
+         destination(df_shorewall);
+         flags(final);
+ };
+ log {
+         source(s_all);
+         filter(f_shorewall6);
+         destination(df_shorewall6);
+         flags(final);
+ };
+ 
+ 
  # these rules provide the same behavior as the commented original syslogd rules
  


------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev