DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        b=rglhKPuCRFqXlbD52S4ynyq4qvjteKkK3r9ShEKE4I9/w1y063ylWyll6d4s8lE0VZ
         n5szuf4xDpRWz0b4JP5NioFDncJ/HmQiPoR2uj36UAlL7Gxs3uanQo3N8kZYRK02JYzJ
         uqvby152L72/7SkYaOGA4idy9h6nrA8+8EFoI=
Precedence: list
MIME-Version: 1.0
In-Reply-To: <13998206.4986.1294065432281.JavaMail.root@zimbra.netvantix.net>
References: <13998206.4986.1294065432281.JavaMail.root@zimbra.netvantix.net>
Date: Mon, 3 Jan 2011 16:05:00 +0100
Message-ID: <AANLkTinEjkie0LWkT5kJPfEUzBifZ+pXdvPTKcQRR-aZ@mail.gmail.com>
Subject: Re: [alpine-devel] Shorewall Logs
From: Leonardo Arena <rnalrd@gmail.com>
To: Steve Fink <sfink@netvantix.com>
Cc: Alpine-devel <alpine-devel@lists.alpinelinux.org>
Content-Type: text/plain; charset=ISO-8859-1

On Mon, Jan 3, 2011 at 3:37 PM, Steve Fink <sfink@netvantix.com> wrote:
> Where are the Shorewall logs stored?
> The Start/Stop/Restart info is written to /var/log/messages but I'm looking
> for the dropped packets and such.
>
> I've gone through the mailing list archives and cannot find any info.
> I've done some digging and see that this version of syslogd does not look at
> the syslog.conf I'm assuming that because they're kernel messages they're
> being handled by klogd but can't find where they're being written to.
> Thanks,
> Steve

Busybox syslog writes everything in /var/log/messages. It does not
support separated logfiles by facility.
So, your firewall logs should be there, provided that you have enable
logging of dropped/rejected packets in shorewall.

Regards,

- leonardo


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---