Chinaunix首页 | 论坛 | 博客
  • 博客访问: 140614
  • 博文数量: 27
  • 博客积分: 2196
  • 博客等级: 大尉
  • 技术积分: 330
  • 用 户 组: 普通用户
  • 注册时间: 2008-07-17 10:29
文章存档

2008年(27)

我的朋友

分类: LINUX

2008-10-25 18:45:52

目的:使系统单独生产iptables的独立日志,并且按每天记录,达到IPtables滚动日志。

一、配置syslogd的配置文件/etc/syslog.conf

在文件syslog.conf里添加如下内容

# Iptables logging

kern.debug /var/log/iptables

二、使用IPtables滚动日志

先查看并确定logrotate的配置文件/etc/logrotate.conf内容如下:

# see "man logrotate" for details

# rotate log files weekly weekly

# keep 4 weeks worth of backlogs rotate 4

# create new (empty) log files after rotating old ones create

# uncomment this if you want your log files compressed

#compress

# RPM packages drop log rotation information into this directory include /etc/logrotate.d

# no packages own wtmp -- we'll rotate them here /var/log/wtmp { monthly create 0664 root utmp rotate 1 }

# system-specific logs may be also be configured here.


然后在syslog的滚动日志配置文件/etc/logrotate.d/syslog里面添加IPtables的日志文件/var/log/iptables,详细内容如下:

/var/log/iptables /var/log/messages /var/log/secure /var/log/maillog /var/log/spooler /var/log/boot.log /var/log/cron {
    sharedscripts
    postrotate
    /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
    endscript
}


最后安排logrotate每天执行一次,确定文件/etc/cron.daily/logrotate内容如下:

#!/bin/sh

/usr/sbin/logrotate /etc/logrotate.conf
EXITVALUE=$?
if [ $EXITVALUE != 0 ]; then
    /usr/bin/logger -t logrotate "ALERT exited abnormally with [$EXITVALUE]"
fi
exit 0

到此就完成了!

阅读(9342) | 评论(0) | 转发(0) |
给主人留下些什么吧!~~