[cobalt-users] syslogd.conf and logging

[josh <josh@xxxxxxxxxxxxxxxxxx>]

I'm using tcp wrappers and it would help me in two ways if everything
tcp wrappers did was logged. I would like to know if someone is trying
to hammer an inaccessible port. I would also like to know if one of my
users can't access something, because of a typo in hosts.allow. (Yes
tcpdcheck and tcpdmatch work) Can I configure this -- I think the last
time I tried I disabled a whole lot by accident.

I've include my syslog.conf which I thought would insure that every
attempt at telnet, ftp or whatever would get logged even if it wasn't
successful or blocked by tcpwrappers. I've also included enough of my
/etc/hosts.allow just in case the options need to be changed there.

-- 
Josh Kuperman                       
josh@xxxxxxxxxxxxxxxxxx

# Log inetd connections (restricted access)
authpriv.*				/var/log/secure

# Log all other auth messages here (restricted access)
auth.*				/var/log/auth


#
# hosts.allow	This file describes the names of the hosts which are
#		allowed to use the local INET services, as decided
#		by the '/usr/sbin/tcpd' server.
#
ALL:localhost:ALLOW
ALL:127.0.0.1:ALLOW
amandad:192.168.1.75:ALLOW
in.telnetd:192.168.1.0/255.255.255.0:ALLOW

...

ALL:ALL:DENY