I have configured my Cisco firewall to redirect all its logs to my Ubuntu 9.1 server (no UI.)
Now, my /var/log/messages is getting all the firewall logs + all other logs.
I'm wondering if there is a way to redirect the logs from my Cisco Firewall (coming from UDP port 514) to another file.
I have configured my Cisco ASa Firewall to send its logs to my ubuntu server in /var/log/cisco/ I see the logfiles populating in real time, but i can also see all the logs are also wtitten to /var/log/messages. How can i make sure i do not have a log redundancy? I dont want my firewall logs displayed in messages since there are now sent to /var/log/cisco.
View 1 Replies View RelatedIs there a way I can redirect messages from kernel ringbuffer to a logfile, e.g. with rsyslogd? With redirect I mean that the messages do no longer appear in dmesg, but only in the logfile.
In my case that should be iptables log messages.
Occasionally i get a "No space on device" message on all open terminals and in logs.How do i make it go away.
View 9 Replies View RelatedI have a set of bash scripts that I'm running that automatically build a set of packages for me and redirect their output into logs. Basically, I have a bunch of lines that are something like this: ${CONFIGURE_DIR}/configure &> ${LOG_DIR}/log or cd ${CONFIGURE_DIR} && make &> ${LOG_DIR}/log, etc.
This is supposed to make the entire process silent. However, sometimes with some packages some output leaks to my console (either stdout or stderr). I'm thinking that maybe the configure scripts/make are executing commands within new shell instances that don't inherit my redirect, or something to that effect.
Another reason for thinking this is that in another part of my script I detect errors when running make by testing with "if [ $? -ne 0 ]", and if the redirect leaks to my console and also the leaked output indicates that the build failed ("make: Error" and so on), then my $? test fails (i.e., it thinks that $? == 0, whereas a failed make should return a non-zero value). It's as if my original script can't "see" the results from child commands executed from later scripts.
I'm running OpenSUSE 11.4. The problem is that I can set easily what to log (for firewall), but not where to log. And currently the same logs are written to /var/log/firewall and /var/log/messages. I still want messages be written into the first one, but not the second one — it is redundant and it is polluting regular system logs.So how to stop the firewall from writting logs to /var/log/messages?
View 5 Replies View RelatedI have a batch job which logs in to the server every 10 minutes via windows rsh. The job checks to see is there are any files that need to be send via a EDI serverto a supplier.The following logwatch report is swamped with the login messages and would like to either suppress the logging in PAM? or suppress the entry in the logwatch report?But I still want logging id the username is not username1.Connections (secure-log) Begin rshd[1754]: pam_rhosts_auth(rsh:auth): allowed to username1@10.0.0.1 as myedi
View 2 Replies View RelatedI'm wondering why I keep getting the following in /var/log/messages on a system running the latest CentOS 5 64 bit kernel:
Nov 8 09:50:24 hostname kernel: myri10ge: eth2: link down
Nov 8 09:50:24 hostname kernel: myri10ge: eth2: link up
Nov 8 09:50:34 hostname kernel: myri10ge: eth2: link down
[Code]....
What does these messages in PING mean?
Code:
PING 192.25.141.248 (192.25.141.248) 56(84) bytes of data.
From 192.25.141.229: icmp_seq=1 Redirect Host(New nexthop: 192.25.141.248)
[code]....
I suspect this is an initial configuration bug. All firewall logs seem to be going to all
three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
Removed the thread; figured out that this does work in the zones config:
<Record you want redirected to another nameserver><tab>IN<tab>NS<tab><name server to redirect the query to>
Got a Ubuntu system. Have a device on my LAN that can send Syslog messages.
I would like to:
1. Capture these specific syslog messages.
2. Keep them separate from any other syslog activity on the Ubuntu system.
3. View these syslog messages later.
I have two servers on my network One with ubuntu 9.10 server And one with openSUSE 11.2.The ubuntu server is my webserver and runs phpsysinfo and my website. On the openSuse server i have a webbased application and some files that i want people to be able to reach by using mydomain.com wich points to my ubuntu server. Is there any way to do this?
View 1 Replies View RelatedI've been having a hard time googling and trying to get ALL network connection to be redirected to squid proxy. I couldn't find a proper configuration for ufw or iptables. The ideas are:
1. redirection rule should NOT depend on a specific network inteface, but should work with any connection type, ex.: ppp0 or eth0... 2. firewall rules can be for firehol, iptables, or ufw (the same as iptables, just tell me where to place them). Preferably ufw or gufw. 3. should not interfere on cups web interface and lighttpd server.
BTW: it's not a ubuntu server install
Here's what I'm trying to do to complete my rocking development server.
I would like all outgoing email on my Ubuntu server to be redirected to one email address (internal or external). I don't have any mail server installed yet (I'll probably use postfix unless you have another suggestion).
The reason I would like this to work is because I'm a web developer working on multiple projects. When I start working on a new project I would like to be able to test some of the forms and features in the web application (PHP) without having emails sent to the email address configured in the application. I can always change configurations but having my development server forward the emails would save me lots of trouble.
Example:
If one of my php application sends an email to: user1@domain.com, user3@domain4.com... I would like all of them to forward to myemail@domain.com
I got two web apps in my single linux box, they are Wiki and Mantis the screenshot of the web apps directory shown below.I have created the DNS CNAME record for this server which point to the main server SV6.somehow i got error after i edit it and restart the Apache server.
View 2 Replies View RelatedI'm hosting my own dedicated server with Ubuntu Server 10.10. I have it set up with a static local IP, and I've configured DynDNS to link up with my router and allow my server to go live to the internet. I have all the appropriate ports unlocked, with the exception of port 80. This port is blocked by my ISP (Charter) and I can't use it. Due to this, I configured my router to listen on port 81, and direct it to my server.
So, In order to view it, you need to go to the IP XXX.xxx.XXX.xxx:81 Today, I registered (www.online-self.com) in hopes of getting around my current mask (provided by DynDNS.com (omegame.selfip.com). So here is my dilemma, When I go to the host of my domain name , I want to redirect my DNS to my server IP.
I can't seem to do it though? They want a strict IP address, no port extensions. How do I get around this so that my domain name and IP address link up? I'm thinking I may be missing a step, or maybe I needed to register a domain name that simply redirects? I'm starting to get confused on what I should do next. Can I even do this?
Our company owns multiple tld's for our corporate domain (e.g. company.com, company.net, etc.). Currently, we operate the main website at [URL]. To have "company.net" et al forward/redirect to "company.com", should we use a 301 redirect or setup a ServerAlias in Apache's virtual host directive (we use name-based virtual hosting on Ubuntu Server). Are there any SEO penalties from one approach vs. the other (e.g. Google thinking you have multiple sites with the same contact + flagging it as spam)?
View 2 Replies View RelatedSince Port 80 and 443 are the only ports I have open, how is it that an IPAddress can hit my server yet not appear in ANY logs ?
View 9 Replies View RelatedI'm a bit of a unix noobie trying to manage a small ubuntu server. I want to run a bash script automatically after an ssh user logs in. For example, after they log in and the default welcome message is displayed, I want to run a script that displays some server statistics since the last session. I made an alias to the script, and I could run it manually after I log in, but it's a bit of a hassle. Is there any way I could do this?
View 2 Replies View RelatedI'm running a set of virtual machines (most in ESXi, one in VirtualBox on my desktop) to try and replicate an existing physical network structure with a Samba domain operating across multiple subnets. The layout is:
(ESXi)
* Router - Ubuntu 8.04, running dnsmasq, bridging my 2 virtual subnets (10.10.4.1/24 & 10.10.5.1/24) and my physical network
* PDC - Ubuntu 8.04, configured as a Samba PDC with PAM configured to use LDAP, SMBLDAP etc. on 10.10.4.11
* LDAP - Ubuntu 8.04, running Zimbra 5 mail server, acting as the LDAP backend for Samba on 10.10.4.12
* BDC - Ubuntu 8.04, configured as a Samba BDC with PAM LDAP etc.
* Client1 - Windows XP, joined to domain on 10.10.5.100
(Virtualbox)
* Client2 - Windows XP, joined to domain on 10.10.5.99
Watching /var/log/daemon.log, /var/log/samba/*, smbstatus -bd0 shows that Client1 successfully logs on to the BDC (10.10.5.2) but Client2 logs on to the PDC (10.10.4.11) instead. Both clients have the same subnet, DNS, WINS settings etc. I've seen the issue happen in our physical setup too but very infrequently and usually when there's been a network interruption between the BDC(s) and the LDAP server.
I am using my ubuntu server as my home router.Everything is working as expected with one exception.y DSL modem is a POS and every now and again it looses connection to the router. Sometimes it needs to be reset and sometimes it does not.Either way, when this happens my ubuntu server needs to reacquire an IP from my ISP. If it screws up when I'm at home it's no big deal, but if it happens when I'm not around my housemates have taken to hitting the reset switch on the server. I'm not a big fan of this so I wrote a script to ping my ISP's gateway. If it's unavailable it bounces the eth0 interface and tries to get an IP. I am running this script every couple of minutes in a cron job. Now I'm getting syslog entries like
Code:
Aug 9 20:31:01 portal CRON[9602]: (root) CMD (/opt/ChkAndFixNetwork.sh)
every few minutes. This is annoying and makes the logs useless for troubleshooting. I
[code]...
We had recently got some problem with our server(local server) and we recently upgraded from Ubuntu server 8.04 to 10.04 and we were not able to access awstats logs from web.So can any one say a method to get back the logs from the server?
View 1 Replies View RelatedHow can I redirect my URL after a site move.I have phpBB forum software installed on a 10.04 server, and I recently moved the forums from mysite.com/forums/ to mysite.com/.
So, a thread that looked like
mysite.com/forums/viewtopic=...
now looks like
[code]...
I operate a home network with Ubuntu Server 10.04 with services including DHCP3, Bind9, Apache, and so on. Since I host several dozen websites from home, I have to run Bind DNS. All Ubuntu boxes on my network operate fine. However, all Windows boxes on the network seem to forget to look internally for DNS after a couple of page loads on my internal sites. The network settings still indicate that my internal domain name server is the first lookup and everything seems normal.
View 2 Replies View RelatedWe have a backup program that works with HP's ultrium tapes that whenever it's failing it's sending an error to the root's system logs. Now if I run mutt as root I can see the system logs and it's very easy to pinpoint any backup error messages.
Is there any way to copy all these system messages to another user as well so that someone with no root access could run mutt as well and check for these logs daily?
On my Server I have an application running. I have the External IP address of the Server registered in DNS so users requiring access from outside the office can enter a full URL rather then an IP address.
How to I change my Apache config so that all traffic that comes into the server from the URL is put over https?
My goal is a testing server with an apache virtual host for each site that I'm working on, with fairly painless setup for each new job.For example, I want http://site-a.mydomain to server this document root /home/client-a/site-a/public_html (or something to that effect)Ideally, DNS will use a wildcard to point http://anything-i-type.mydomain to the testing server, and apache will have a dynamic virtual host definition that will do a little magic so that I won't have to mess with DNS records or add a new virtual host each time I add a new site for a client. I'll worry about that when I get there, just put that out there in case anyone has any tips! for now I just have one little problem that's hurting my mood-
It looks like I've got my DNS server working just fine, so yay there- BUT my first attempt at adding a virtual host isn't working quite how I expected- meaning that site-a.mydomain now serves up the correct document root, but when you put http://site-a.mydomain into the browser's address bar, the address bar is then updated to http://10.0.1.100/site-a/public_html - bogus!! I must be missing an option like "FunnyBusiness Off" -
root@ubuntuvm:/etc/apache2/sites-available# vim client-a.mydomain
<VirtualHost *:80>
UseCanonicalName Off
ServerName site-a.mydomain
DocumentRoot /home/client-a/site-a/public_html
</VirtualHost>2
I have several web servers running apache on my LAN. Each internal server hosts a number of domains.I would like to make these available to the internet and make sure they all get to use port 80 and 443.My idea was to put Apache on the firewall and have all http(s) traffic from the Internet to my firewall be redirected by Apache to the different internal apache servers. This, in theory, would allow me to keep the standard http(s) port.
Can this be done? I was thinking of mod_rewrite and mod_redirect but in all honesty, I'm a little at a loss on where to start.Can someone point me to relevant documentation or give me the basic idea on how to start?
I was just checking some of the generated logs from Samba.
Code:
Quote:
I've looked over my smb.conf and it doesn't look like I even have any printer sharing enabled.
Quote:
How PC1 was refused a connection when it looks like I don't have any printers being shared throught Samba?
This is just on a home LAN.