Re: [Devil-linux-develop] klogd is needed

[Heiko Z. <he...@zu...>]

Friedrich Lobenstock wrote:
> Hi!
> 
> I just found out that without a running klogd everytime a logging filterrule
> is hit it gets printed on the console and not only in the syslog. I had to
> replace the busybox klogd and then start "klogd -c 1". Now it is possible to
> work on the console while your are eg. under attack and lot of log rules get
> hit.
> 
> I'd like to check in my modifications, but I don't know the motivations 
> behind why klogd wasn't started before.

When you specify debug (7) as loglevel, then you don't have any problems.

Here is an example I use:

$IPTABLES -N LOG_AND_DROP
$IPTABLES -A LOG_AND_DROP -j LOG --log-level debug \
     --log-prefix "DROP "  -m limit --limit $LOG_LIMIT
$IPTABLES -A LOG_AND_DROP -j DROP


-- 

cu
   Heiko

We are Penguin, Resistance is futile!

http://www.devil-linux.org