stify">};
# news.err /var/log/news/news.err{(s_all); (f_news); (f_at_least_err); (df_news_dot_err);
};
# news.notice /var/log/news/news.notice{(s_all); (f_news); (f_at_least_notice); (df_news_dot_notice);
};
# *.=debug;
# auth, authpriv.none;
# news.none; mail.none -/var/log/debug {(s_all); (f_debug); (df_debug);
};
# *.=info; *.=notice; *.=warn;
# auth, authpriv.none;
# cron, daemon.none;
# mail, news.none -/var/log/messages {(s_all); (f_messages); (df_messages);
};
# * .emerg * {(s_all); (f_emerg); (du_all);
};
# daemon. *; mail. *;
# news.crit; news.err; news.notice;
# *.=debug; *.=info;
# *.=notice; *.=warn |/dev/xconsole {(s_all); (f_xconsole); (dp_xconsole);
};
# radius log {(s_all); (f_radius);
destination (df_radius);
};
На віддалених хостах необхідно оновити конфігурацію наступним чином:
/etc/syslog.conf
# /etc/syslog.conf Configuration file for syslogd.
#
# For more information see syslog.conf (5)
# manpage.
#
# First some standard logfiles. Log by facility.
#
, authpriv. *log_host
*. *; auth, authpriv.nonelog_host
# | /var/log/syslog.fifo
# cron. * @ log_host. * @ log_host. * @ log_host. * @ log_host. * @ log_host. * @ log_host. *log_host
#
# Logging for the mail system. Split it up so that
# it is easy to write scripts to parse these files.
#. info @ log_host.warn @ log_host.errlog_host
# Logging for INN news system
#. crit @ log_host.err @ log_host.noticelog_host
#
# Some `catch-all 'logfiles.
#
*.=debug; , authpriv.none; . none; mail.nonelog_host
*.=info; *.=notice; *.=warn; , authpriv.none; , daemon.none; , news.nonelog_host
#
# Emergencies are sent to everybody logged in.
#
*. emerg *
#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
# daemon, mail. *;
# news.=crit; news.=err; news.=notice;
# *.=debug; *.=info;
# *.=notice; *.=warn/dev/tty8
# The named pipe/dev/xconsole is for the `xconsole 'utility. To use it,
# you must invoke `xconsole with the `-file option:
#
# $ xconsole -file/dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
# busy site ..
#. *; mail. *; . crit; news.err; news.notice;
*.=debug; *.=info;
*.=notice; *.=warn |/dev/xconsole
# local7.debug /var/log/dhcpd.log
Додаток С
Скрипт ініціалізації пакетного фільтра
/root/boot/firewall
#!/bin/bash
#
# local variables
=/sbin/iptables
# just head
## clear all rules
$ I -F INPUT
$ I -F OUTPUT
$ I -F FORWARD
$ I -F POSTROUTING -t mangle
$ I -F INPUT -t filter
## set default policy to drop all packets
$ I -P INPUT DR...