[nzlug] How to keep iptables log messages out of dmesg?

[Nick 'Zaf' Clifford]

iptables LOG match logs through the kernel log mechanism. You can
specify the log level (DEBUG->CRIT) using --log-level, but this will
always go to the kernel service.

(unless you use ULOG, which uses netlink magic to send the log messages
to a program).

As for keeping it out of dmesg, unfortunately the entire functionality
of dmesg is to output the kernel log buffer.

So the solution is
a) Ignore the problem
b) Stop logging
c) Use ULOG. Mmm, magic.. need someone else who's played with that to
pipe up.

Nick


R. Eimann wrote:
> Hi,
>
> in my openSuSE 10.3, iptables log entries seem to be put into dmesg by default 
> (instead of a separate file, /var/log/firewall, for instance). Does anyone 
> here know how to change this? I.e., put log entries into a file instead of 
> having them in demsg?
>
> Cheers,
> R. Eimann
>
> Today's wisdom:
> Help Wanted: Telepath.  You know where to apply.
>
> _______________________________________________
> NZLUG mailing list NZLUG at linux.net.nz
> http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug
>