Re: [Security Firewall] problem after rebooting

there was a bug sometime ago concerning logrotate that would fail if
there is an error in one of the files it parses. It was the
squidguard, snort and Dansguardian logrotate files case but that was
fixed some time ago.

On 6/15/05, Andreas Hasenack <andreas-KCZ47A4bww4P48s/[email protected]> wrote:
> On Wed, Jun 15, 2005 at 03:59:51PM +0100, bascule wrote:
> > having just deleted older logs and forced logrotate i've now got /var from 100
> > to 14% usage, clearly the logs filled the partition before logrotate got to
> 
> Any idea what was filling up the logs? Just regular firewall logs or did
> some service fail in some way and started sending out many log messages?
> 
> > given that i don't want to repartition and reinstall what could i do to keep
> > log traffic down without losing anything useful, i could up the frequency of
> > rotation and reduce the number of backlog, there's nothing in the
> > 'monitoring/log' section of the interface (which now works fine) to reduce
> > the amount of logging, will i have to do that for each of the firewall rules
> > individually?
> 
> Or the policy, it really depends on what rules filled up the logs.
> 
> 
> 
> 
> ____________________________________________________
> Want to buy your Pack or Services from MandrakeSoft?
> Go to http://www.mandrakestore.com
> Join the Club : http://www.mandrakeclub.com
> ____________________________________________________
> 
> 
> 


-- 
Florin

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________