Subject: mail facility doesn't filter out completely
From: linux sysklogd (sysklogd@purple.nugate.com)
Date: Tue Nov 02 1999 - 21:58:39 CET
Hi,
On a linux slackware (kernel 2.2.10),
I'm trying to filter out the mail facility from /usr/adm/messages
*.=info;*.=notice;mail.none /usr/adm/messages
and it works for all mail facility messages (I have a separate
maillog file), except for "connect from" messages from "mail popper",
eg.:
Nov 2 11:48:33 mail popper[30525]: connect from 209.134.12.157
Nov 2 11:48:48 mail popper[30607]: connect from 209.134.12.158
If I take out "*.=info" entirely, it'll go away.
I've tried all of these, none of which work:
*.=info;*.=notice;mail.none /usr/adm/messages
*.=info;*.=notice;mail.!info /usr/adm/messages
*.=info;*.=notice;mail.!debug /usr/adm/messages
*.=info;*.=notice;mail.none;local0.none /usr/adm/messages
*.=info;*.=notice;mail.!info;mail.!notice /usr/adm/messages
Putting the mail<WHATEVER> in front makes it worse.
Any ideas on juggling the syslog.conf syntax? Just upgrade?
Thanks,
Alex
-
To unsubscribe: send mail to Majordomo@Infodrom.North.DE with the
text "unsubscribe sysklogd" in the message body.
This archive was generated by hypermail 2b25 : Tue Nov 02 1999 - 22:02:46 CET