How to stop firewall from writting logs to /var/log/messages?

I’m running OpenSUSE 11.4. The problem is that I can set easily what to log (for firewall), but not where to log. And currently the same logs are written to /var/log/firewall and /var/log/messages. I still want messages be written into the first one, but not the second one — it is redundant and it is polluting regular system logs.

So how to stop the firewall from writting logs to /var/log/messages?

On 07/19/2011 05:36 PM, truemacias wrote:
>
> So how to stop the firewall from writting logs to /var/log/messages?

interesting! but, i think the question you should be asking is:

What might have i done (or someone else with root access to the machine
in question) to cause the firewall to log to /var/log/messages.

because it is not 11.4 (or any previous i’m aware of) default installed
behavior for the firewall to double log as yours is…

sorry, i not sure where to look to stop it, but someone with access to
the machine has already been there…apparently…


DD
Caveat-Hardware-Software
openSUSE®, the “German Engineered Automobiles” of operating systems!

> What might have i done (or someone else with root access to the machine
> in question) to cause the firewall to log to /var/log/messages.

I guess this is rhetorical question because in computer system there should be a switch to do disable this, if there was a switch to enable this, right?

In case it is not – I don’t know. I just turned it on (firewall). And if I am not mistaken this was the same case with previous version I had (11.1). The difference is, now it really bothers me :wink:

OS 11.4 was installed, not upgraded from 11.1

> sorry, i not sure where to look to stop it, but someone with access to
> the machine has already been there…apparently…

Only I have access to the machine. Plus administration tools which could break something.

On 07/19/2011 08:06 PM, truemacias wrote:
>
> I guess this is rhetorical question because in computer system there
> should be a switch to do disable this, if there was a switch to enable
> this, right?

well yes, it must be in a configuration file somewhere…but, as said i
don’t know where exactly…but i googled for you on:
site:opensuse.org firewall log
http://www.google.com/search?q=site%3Aopensuse.org+firewall+log

and found 9k hits within the openSUSE universe…
the first hit looks like it might give you some info you can use:

http://forums.opensuse.org/english/get-technical-help-here/network-internet/456671-firewall-logs-var-log-firewall-warn-messages-clutter.html

then with a google on the docs
site:doc.opensuse.org firewall log
http://www.google.com/search?q=site%3Aopensuse.org+firewall+log
were i found more than i wanted to read to try to learn why your 11.4 is
doing something mine is not…

hopefully someone who knows what is directing your firewall to multi-log
will stop in here eventually…

let us know how you get on…


DD
Caveat-Hardware-Software
openSUSE®, the “German Engineered Automobiles” of operating systems!

Oh, you are good! I have to remember for further issues, to search for the issue and then search for the issue in opensuse specifically, because it might as simple as… bug.

https://bugzilla.novell.com/show_bug.cgi?id=676041

Thank you for your help!

On 07/19/2011 10:06 PM, truemacias wrote:

> Thank you for your help!

wow! happy you found it…welcome…yep that google’s “site specifier”
is really good! think about all you can find with:

site:forums.opensuse.org [whatever]
site:doc.opensuse.org [whatever]
site:en.opensuse.org [whatever]
site:opensuse.org [whatever]


DD
Caveat-Hardware-Software
openSUSE®, the “German Engineered Automobiles” of operating systems!