Ik wordt zo'n beetje gek, ik wil mijn firewall testen en daarin staat het volgende:
/sbin/iptables -A INPUT -j LOG -m limit --limit 30/minute --log-prefix "Dropping: "
En dan komen er steeds van die leuke regels in /var/log/syslog:
Dropping: IN=ppp0 OUT= MAC= SRC=194.109.6.45 DST=213.84.160.203 LEN=60 TOS=0x10 PREC=0x00 TTL=61 ID=1561 DF PROTO=TCP SPT=49625 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0
Deze verschijnen echter ook in de console (/dev/ttyX (waar de X is welke ik ingelogd ben))
oke /etc/syslog aanpassen
/etc/init.d/sysklogd stop
/etc/init.d/sysklogd start
maar nog steeds die messages over mijn scherm !
Hoe kan ik die uitzetten ?
/sbin/iptables -A INPUT -j LOG -m limit --limit 30/minute --log-prefix "Dropping: "
En dan komen er steeds van die leuke regels in /var/log/syslog:
Dropping: IN=ppp0 OUT= MAC= SRC=194.109.6.45 DST=213.84.160.203 LEN=60 TOS=0x10 PREC=0x00 TTL=61 ID=1561 DF PROTO=TCP SPT=49625 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0
Deze verschijnen echter ook in de console (/dev/ttyX (waar de X is welke ik ingelogd ben))
oke /etc/syslog aanpassen
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
| # /etc/syslog.conf Configuration file for syslogd.
#
# For more information see syslog.conf(5)
# manpage.
#
# First some standard logfiles. Log by facility.
#
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none -/var/log/syslog
#cron.* /var/log/cron.log
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* /var/log/mail.log
user.* -/var/log/user.log
uucp.* -/var/log/uucp.log
#
# Logging for the mail system. Split it up so that
# it is easy to write scripts to parse these files.
#
mail.info -/var/log/mail.info
mail.warn -/var/log/mail.warn
mail.err /var/log/mail.err
# Logging for INN news system
#
news.crit /var/log/news/news.crit
news.err /var/log/news/news.err
news.notice -/var/log/news/news.notice
#
# Some `catch-all' logfiles.
#
*.=debug;\
auth,authpriv.none;\
news.none;mail.none -/var/log/debug
*.=info;*.=notice;*.=warn;\
auth,authpriv.none;\
cron,daemon.none;\
mail,news.none -/var/log/messages
#
# Emergencies are sent to everybody logged in.
#
#*.emerg *
##dit was de enige regel die iets naar de cosole zou schrijven ..
#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
# news.=crit;news.=err;news.=notice;\
# *.=debug;*.=info;\
# *.=notice;*.=warn /dev/tty8
# The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
# you must invoke `xconsole' with the `-file' option:
#
# $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
# busy site..
#
#daemon.*;mail.*;\
# news.crit;news.err;news.notice;\
# *.=debug;*.=info;\
# *.=notice;*.=warn |/dev/xconsole
## ook deze maar uitgezet |
/etc/init.d/sysklogd stop
/etc/init.d/sysklogd start
maar nog steeds die messages over mijn scherm !
Hoe kan ik die uitzetten ?