DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD General

OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 15th May 2008
roundkat roundkat is offline
Shell Scout
 
Join Date: May 2008
Posts: 107
Thanked 1 Time in 1 Post
Default spamd logging question

I am using OpenBSD spamd on all my 3 smtp gateways.

I am using the default settings

Code:
$ cat /etc/rc.conf |grep spamd                                                 
spamd_flags=""          # for normal use: "" and see spamd-setup(8)
spamd_black=NO          # set to YES to run spamd without greylisting
My question:
I have this entry in /etc/syslog (3 tabs from info to /var)
Code:
!spamd
daemon.err;daemon.warn;daemon.info                      /var/log/spamd
spamd still logs to both /var/log/daemon and /var/log/spamd.

thx
rk
Reply With Quote
  #2   (View Single Post)  
Old 15th May 2008
roundkat roundkat is offline
Shell Scout
 
Join Date: May 2008
Posts: 107
Thanked 1 Time in 1 Post
Default

Found solution
missing a !
Code:
man syslog.conf 5

EXAMPLES
     A configuration file might appear as follows:

     # Log info (and higher) messages from spamd only to
     # a dedicated file, discarding debug messages.
     # Matching messages abort evaluation of further rules.
     A configuration file might appear as follows:

     # Log info (and higher) messages from spamd only to
     # a dedicated file, discarding debug messages.
     # Matching messages abort evaluation of further rules.
     !!spamd
     daemon.info                                             /var/log/spamd
Edit..
Nope, still logging to both ..(:

Last edited by roundkat; 15th May 2008 at 10:03 PM.
Reply With Quote
  #3   (View Single Post)  
Old 4th June 2008
roundkat roundkat is offline
Shell Scout
 
Join Date: May 2008
Posts: 107
Thanked 1 Time in 1 Post
Default

still have not found a solution on this..

anyone.. ???
Reply With Quote
  #4   (View Single Post)  
Old 4th June 2008
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 3,658
Thanked 214 Times in 189 Posts
Default

You might post your question to the misc@ mailing list. There are only a small number of people who regularly answer OpenBSD-related questions here.
Reply With Quote
  #5   (View Single Post)  
Old 9th June 2008
ohauer ohauer is offline
Port Guard
 
Join Date: May 2008
Location: germany
Posts: 32
Thanked 2 Times in 2 Posts
Default

Take a look in the sort order, make shure to set the log for spamd before standart logging.

Quote:
!!prog causes the subsequent block to abort evaluation when a message
matches, ensuring that only a single set of actions is taken.
for example:
Code:
#   $Id: syslog.conf,v 1.1 2007/11/25 20:21:09 root Exp $

!!spamd
daemon.err;daemon.warn;daemon.info                      /var/log/spamd

*.notice;auth,authpriv,cron,ftp,kern,lpr,mail,user.none /var/log/messages
kern.debug;syslog,user.info                             /var/log/messages
auth.info                                               /var/log/authlog
Reply With Quote
  #6   (View Single Post)  
Old 9th June 2008
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 3,140
Thanked 182 Times in 149 Posts
Default

Did you send a HUP signal to syslogd? Only then will syslog reread the modified syslog.conf configuration file.
Code:
# pkill -HUP syslogd
Sometimes you also need to create an empty log file
Code:
# touch /var/log/spamd
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
  #7   (View Single Post)  
Old 11th June 2008
roundkat roundkat is offline
Shell Scout
 
Join Date: May 2008
Posts: 107
Thanked 1 Time in 1 Post
Default

Sorry..
Life got in the way.. (broken water line under the floor at my rent house.. )

ohauer -- I think I tried that but it then blocked *all* logging to
/var/log/daemon

J65nko... Yes Sir.. but I will try it again to make sure..
I also did create the the log file.. and have added it to
newsyslog..

jggimi -- I have noticed this is a FreeBSD dominated forum..
misc@ scares me..

much thank
rk
Reply With Quote
  #8   (View Single Post)  
Old 11th June 2008
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 3,658
Thanked 214 Times in 189 Posts
Default

Quote:
Originally Posted by roundkat View Post
misc@ scares me..
It shouldn't scare you if you post a concise, polite question, with detailed information, that shows you've done what homework you can.

In this case, you are having trouble understanding various syslog man pages. All you really need is a pointer to some additional help, and that is how you should phrase your question.

No one will get angry if you ask for assistance to help you figure out what it is you do not yet know, and, as you have done here already, post:
Your configuration
Your symptoms
Things you've tried that haven't worked
You may get no response, but more likely, pointers to additional documentation.

Those who get angry responses either haven't done their homework, or who post a "it's broke, fix it for me" message. Sometimes these are combined.

If you're still scared, and want to try a kinder, gentler, more newbie-friendly mailing list that has a relatively large numbers of readers, try the openbsd-newbies list. It is unofficial, sign up for it at www.sfobug.org, the San Fransisco OpenBSD Users Group website.
Reply With Quote
  #9   (View Single Post)  
Old 11th June 2008
wilfried's Avatar
wilfried wilfried is offline
Real Name: Peter Strömberg
Port Guard
 
Join Date: May 2008
Location: Teckomatorp, Sweden
Posts: 11
Thanked 3 Times in 3 Posts
Default

Quote:
Originally Posted by roundkat View Post
ohauer -- I think I tried that but it then blocked *all* logging to
/var/log/daemon
use
Code:
!!spamd
daemon.info                      /var/log/spamd
!*

...
as the example says in syslog.conf(5) :-)
__________________
HP ProCurve 1800-24G, Phenom 9750, Dual Opteron 265, AMD64 3000+,
Dual P3-800, eMac G4 1.0GHz, Sun Blade 150, Alpha PWS 433 and more ...
Reply With Quote
Old 11th June 2008
roundkat roundkat is offline
Shell Scout
 
Join Date: May 2008
Posts: 107
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by wilfried View Post
use
Code:
!!spamd
daemon.info                      /var/log/spamd
!*

...
as the example says in syslog.conf(5) :-)
I have put this in place.. but I sure don't remember seeing this
on my 4.1 box..

I am getting old though..
rk
__________________
All posts sent on ReCycled Electrons...
Reply With Quote
Old 11th June 2008
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 2,876
Thanked 190 Times in 160 Posts
Default

Quote:
Originally Posted by roundkat View Post
I have noticed this is a FreeBSD dominated forum..
This is largely reflective of the market share differences between FreeBSD & OpenBSD, ie.

http://en.wikipedia.org/wiki/Compari...rating_systems

...but we still hold out hope for the wayward souls.

Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
sshd logging - can we get the ssh command? Mantazz FreeBSD Security 17 23rd May 2009 08:34 AM
pflog not logging. bsdnewbie999 OpenBSD General 9 13th March 2009 11:19 PM
Suggestions for Web Traffic Logging? Bruco FreeBSD Ports and Packages 16 18th September 2008 10:54 PM
Network + aMule Logging Problems disappearedng FreeBSD General 0 28th August 2008 09:22 PM
OpenBSD's SPAMd dying stukov General software and network 11 16th June 2008 03:18 PM


All times are GMT. The time now is 12:11 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick