Iptables and logging to the console

[Robert Spangler]

Hi,

How can I stop Iptables logging to the console?  I don't know where else to 
look.  Below are my sysctl.conf and syslog.conf files

Thanks for your help

###########################################
Here's my sysctl.conf:

# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled.  See sysctl(8) and
# sysctl.conf(5) for more details.

# Controls IP packet forwarding
net.ipv4.ip_forward = 0

# Controls source route verification
net.ipv4.conf.default.rp_filter = 1

# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 0

# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1

# Stop logging to the console
kernel.printk = 3 4 1 7

###########################################

###########################################
Here's my syslog.conf:

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console
#kern.*                                                 /var/log/messages

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;news.none;authpriv.none;cron.none              /var/log/messages

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  /var/log/maillog

# Log cron stuff
cron.*                                                  /var/log/cron

# Everybody gets emergency messages
#*.emerg                                                        *
*.emerg                                                 /var/log/messages

# Save news errors of level crit and higher in a special file.
uucp,news.crit                                          /var/log/spooler

# Save boot messages also to boot.log
local7.*                                                /var/log/boot.log

#
# INN
#
news.=crit                                        /var/log/news/news.crit
news.=err                                         /var/log/news/news.err
news.notice                                       /var/log/news/news.notice

###########################################

[Alexander Dalloz]

Am Mo, den 29.11.2004 schrieb Robert Spangler um 23:24:
> How can I stop Iptables logging to the console?  I don't know where else to 
> look.  Below are my sysctl.conf and syslog.conf files
> Robert

With which priority do you let iptables log? In /etc/sysconfig/syslog
set for klogd the parameter "-c" with a value higher than your syslog
priority for iptables.

Alexander

[Robert Spangler]

On Tuesday 30 November 2004 17:46, Alexander Dalloz wrote:
> > How can I stop Iptables logging to the console?  I don't know where else
> > to look.  Below are my sysctl.conf and syslog.conf files
>
> With which priority do you let iptables log? In /etc/sysconfig/syslog
>  set for klogd the parameter "-c" with a value higher than your syslog
>  priority for iptables.

Thanks for the reply.  I have checked klogd(8) and this is what I have found:

########  KLOGD(8)  ########
The argument given to the -c switch specifies the priority level of messages 
which will be directed to the console.  Note that messages of a priority 
value  LOWER than the indicated number will be directed to the console.
###########################

So if I am reading this correctly then I would need to set something lower 
then what the is set for iptables.  Correct?

Thanks again for the reply.  You have pointed me in a direction I haven't 
thought of.

[Alexander Dalloz]

Am Mi, den 01.12.2004 schrieb Robert Spangler um 2:10:
> > > How can I stop Iptables logging to the console?  I don't know where else
> > > to look.  Below are my sysctl.conf and syslog.conf files
> >
> > With which priority do you let iptables log? In /etc/sysconfig/syslog
> >  set for klogd the parameter "-c" with a value higher than your syslog
> >  priority for iptables.
>
> Thanks for the reply.  I have checked klogd(8) and this is what I have found:
>
> ########  KLOGD(8)  ########
> The argument given to the -c switch specifies the priority level of messages 
> which will be directed to the console.  Note that messages of a priority 
> value  LOWER than the indicated number will be directed to the console.
> ###########################
>
> So if I am reading this correctly then I would need to set something lower 
> then what the is set for iptables.  Correct?

You are right - lower or equal would be correct -, I mixed it, sorry.
Priorities are listed in "man 2 syslog".
> Thanks again for the reply.  You have pointed me in a direction I haven't 
> thought of.
> Robert

Alexander