diff --git a/Shorewall-docs/FAQ.xml b/Shorewall-docs/FAQ.xml index b672c77a0..2ef677214 100644 --- a/Shorewall-docs/FAQ.xml +++ b/Shorewall-docs/FAQ.xml @@ -17,7 +17,7 @@ - 2004-01-09 + 2004-01-20 2001-2004 @@ -984,11 +984,43 @@ run_iptables -A common -p udp --sport 53 -mstate --state NEW -j DROPAnswer: If you are running Shorewall version 1.4.4 or 1.4.4a then check the errata. - Otherwise, see the dmesg man page (man dmesg). - You must add a suitable dmesg command to your startup - scripts or place it in /etc/shorewall/start. Under RedHat, the max log - level that is sent to the console is specified in /etc/sysconfig/init in - the LOGLEVEL variable. + Otherwise: + + + + Find where klogd is being started (it will be from one of the + files in /etc/init.d -- sysklogd, klogd, ...). Modify that file or + the appropriate configuration file so that klogd is started with + -c <n> where + <n> is a log level of 5 or less; or + + + + See the dmesg man page (man dmesg). + You must add a suitable dmesg command to your startup + scripts or place it in /etc/shorewall/start. + + + + + Under RedHat and Mandrake, the max log level that is sent to the + console is specified in /etc/sysconfig/init in the LOGLEVEL variable. + Set LOGLEVEL=5 to suppress info (log level 6) messages + on the console. + + + + Under Debian, you can set KLOGD=-c 5 in + /etc/init.d/klogd to suppress info (log level 6) messages on the + console. + + + + Under SuSE, add -c 5 to KLOGD_PARAMS in + /etc/sysconfig/syslog to suppress info (log level 6) messages on the + console. +
@@ -1089,7 +1121,7 @@ run_iptables -A common -p udp --sport 53 -mstate --state NEW -j DROPNEWNOTSYN and LOGNEWNOTSYN - in /etc/shorewall/shorewall.conf. + in /etc/shorewall/shorewall.conf. @@ -1877,7 +1909,9 @@ Creating input Chains... Revision History - 1.102004-01-09TEAdded + 1.122004-01-20TEImprove + FAQ 16 answer.1.112004-01-14TECorrected + broken link1.102004-01-09TEAdded a couple of more legacy FAQ numbers.1.92004-01-08TECorrected typo in FAQ 26a. Added warning to FAQ 2 regarding source address of redirected requests.1.82003-12-31TEAdditions