Koozali.org: home of the SME Server

Help Please with log filling up

Janm

Help Please with log filling up
« on: April 17, 2005, 03:24:09 PM »
My
/var/log/messages
is filling up with messages of denying
to DPT=4246 LEN=14
about 100 Mb pr our
can anybody help how to change the rule for that
Thanks in advance
From Jan in oz land
PS
I must admit i had an Eserver Lugdunum 17.3 running for a cupple of days so i think thats the reson

Janm

Found a way out of the trubble
« Reply #1 on: April 22, 2005, 11:11:56 AM »
I just made 2 emty files
lastlog =0 kb
messages =0 kb

and copy to /var/log/
and then pulled out the cord to
the computer and restarted with out
intrigitets check now its cleaned
by Janm oz land

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Help Please with log filling up
« Reply #2 on: April 22, 2005, 04:18:08 PM »
Quote from: "Janm"
My
/var/log/messages
is filling up with messages of denying
to DPT=4246 LEN=14
about 100 Mb pr our
can anybody help how to change the rule for that


/sbin/e-smith/config setprop masq Logging none
/sbin/e-smith/signal-event remoteaccess-update

will stop all firewall logging.

If you want to selectively drop that particular log, then you'll need to add a custom template fragment for /etc/rc.d/init.d/masq.

Janm

Thanks Charlie
« Reply #3 on: April 23, 2005, 08:52:22 AM »
Thankyou Charlie
I have done that now but i dont know how to build that fragment or cutom template
I know why i get all that traffic becourse of that
Eserver lugdunum 17.3 i put up but thats over now
ihave 4 mb down and 512kb up so thats to little connection anyhow to do that
Janm Oz land

Offline arnoldob

  • *
  • 183
  • +0/-0
Help Please with log filling up
« Reply #4 on: April 24, 2005, 12:49:23 AM »
It moves all the iptables deny log entries to a different log. This makes the messages log much smaller and faster to search.

The How-to:
http://firewall-services.com/ulogd-howto-en.html

Also in French:
http://firewall-services.com/ulogd-howto-fr.html

 :-)
Tampa, FL USA

Janm

Help Please with log filling up
« Reply #5 on: April 24, 2005, 11:16:02 PM »
Thanks for reply Arnoldob
I have tried it now and my log files
went down from 100 mb every our to nearly nothing
but i also stopped the firewall logging to advised from CharlieBrady
Regards Janm from Oz land