Save rsyslog data -

[Ed Greshko]

On 08/21/2012 12:17 AM, Bob Goodwin - Zuni, Virginia, USA wrote:
> Ok, but I Have not intentionally done anything to accomplish that. This must result from tomato's logging? It' internal log displays:
>
> ............  snip  ............
>
>> Aug 20 12:12:09 localhost user.warn kernel: ACCEPT IN=br0 OUT=vlan1 SRC=192.168.1.9 DST=74.126.6.130 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=63002 DF PROTO=TCP SPT=54721 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080A01CCD3640000000001030307) 

"tomato" is your router, right?   Not a Fedora machine, right?

Those log entries are being written by "localhost".  They are iptables log entries.  Now, I see you having 2 choices.....

1.  You could post your iptables rules and and have someone debug them.  (Sleep time for me, and not an iptables expert.

2.  Mask the problem by adding:
:msg, contains, "ACCEPT IN" ~
to your /etc/rsyslog.conf   in the appropriate place....or in a /etc/rsyslog.d/maskmyproblem.conf file.


-- 
Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. -- Rick Cook, The Wizardry Compiled