<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xml:base="http://www.nuxified.org" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
 <title>Nuxified GNU/Linux Help Forums - syslog - Comments</title>
 <link>http://www.nuxified.org/blogs/syslog</link>
 <description>Comments for &quot;syslog&quot;</description>
 <language>en</language>
<item>
 <title>I use guarddog to generate</title>
 <link>http://www.nuxified.org/blog/taming_syslog_ng#comment-10700</link>
 <description> &lt;p&gt;I use &lt;a href=&quot;http://www.simonzone.com/software/guarddog/&quot; class=&quot;bb-url&quot;&gt;guarddog&lt;/a&gt; to generate my iptables rules. It lets me log either all blocked packets, or none. Not logging any blocked packets doesn&#039;t seem like a great idea to me.&lt;/p&gt;
&lt;p&gt;&lt;s&gt;By the way, putting backslashes before the colons in the mac address in the filter worked.&lt;/s&gt;&lt;br /&gt;
EDIT: no it didn&#039;t, it was considered a syntax error, which caused ALL logging to stop.&lt;/p&gt;
&lt;p&gt;&lt;s&gt;There&#039;s still something doing something on my disk every few seconds, though. I guess the logs weren&#039;t the problem, then.&lt;/s&gt; And after I wrote that, there wasn&#039;t. Hmm... firefox cache?&lt;/p&gt;
 </description>
 <pubDate>Sun, 28 Oct 2007 19:20:42 +0100</pubDate>
 <dc:creator>tbuitenh</dc:creator>
 <guid isPermaLink="false">comment 10700 at http://www.nuxified.org</guid>
</item>
<item>
 <title>Why do you log blocked</title>
 <link>http://www.nuxified.org/blog/taming_syslog_ng#comment-10699</link>
 <description> &lt;p&gt;Why do you log blocked broadcasts anyway? If you cannot avoid having broadcasts on your network and don&#039;t want to receive them just block and ignore. I don&#039;t think a broadcast is important enough to be logged, there are other things that deserve much more attention than that.&lt;/p&gt;
 </description>
 <pubDate>Sun, 28 Oct 2007 08:34:31 +0100</pubDate>
 <dc:creator>reptiler</dc:creator>
 <guid isPermaLink="false">comment 10699 at http://www.nuxified.org</guid>
</item>
</channel>
</rss>
