View Single Post
  #4   (View Single Post)  
Old 5th February 2010
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,132
Default

Quote:
I created a symbolic link from /var/log to /var/www/var/log
This means that you did something like this, isn't it ?
  1. copied/moved the complete original "/var/log" directory to "/var/www/var/log".
  2. stopped all logging daemons
  3. rm /var/log/*
  4. rmdir /var/log
  5. ln -s /var/www/var/log /var/log
  6. restarted all logging daemons

Do you see the logs being updated in /var/www/var/log ?

How about permissions? The permissions on some logs are strict
Code:
-rw-r-----  1 root  wheel      375 Feb  5 16:51 authlog
-rw-r-----  1 root  wheel    21514 Feb  5 18:01 daemon
-rw-------  1 root  wheel   313248 Jan 30 12:40 failedlogin
-rw-------  1 root  wheel      151 Feb  5 15:49 maillog
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote