diff --git a/docs/FAQ.xml b/docs/FAQ.xml index 32a0ea1f2..c94954f38 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -1023,12 +1023,24 @@ DROP net fw udp 10619 (FAQ 16a) Why can't I see any Shorewall messages in /var/log/messages? - Answer: The actual log file - name will likely not be well standardized, but anytime you see no - logging, it's time to look outside the Shorewall configuration for the - cause. As an example, recent SuSE releases use - syslog-ng by default and write Shorewall messages to + Answer: First of all, it is + important to understand that Shorewall itself does not control where + Netfilter log messages are written. The LOGFILE setting in + shorewall.conf simply tells the + /sbin/shorewall[-lite] program where to look for + the log. Also, it is important to understand that a log severity of + "debug" will generally be written to fewer log files than a log + severity of "info". + + The actual log file where Netfilter messages are written is not + standardized; but anytime you see no logging, it's time to look + outside the Shorewall configuration for the cause. As an example, + recent SuSE releases use syslog-ng by default + and write Shorewall messages to /var/log/firewall. + + Please see the Shorewall + logging documentation for further information.