my firewall seems to be filling up all sorts of log files that i don't want it in. okay, so that's a bit of hyperbole, but the firewall messages are showing up in /var/log/messages, /var/log/warn and /var/log/firewall. (i don't know if it makes any difference, but it's SuSE 8.0 running kernel 2.4.18.)
i'd like to drop the loggin to messages and warn and leave everything in firewall, but i'm not sure what to do with my syslog.conf file. below are the lines from syslog.conf that mention the three files in question:
i'm not worried about errant kernel messages appearing in the firewall file - they only account for about 1.5% of the messages. i've found websites saying that the firewall logs to kern.=info and kern.=debug. what about boot messages (the other 1.5% of the firewall file) - what log level do they get passed through?