Add a real ipsec.log file and redirect syslog entries to it

2 files changed, 7 insertions, 2 deletions

diff --git a/etc/rc b/etc/rc
index 1f397cd..d2a8b8d 100755
--- a/etc/rc
+++ b/etc/rc
@@ -98,12 +98,14 @@ if [ ! "$PLATFORM" = "cdrom" ]; then
     clog -i -s 10000 /var/log/dhcpd.log
     clog -i -s 10000 /var/log/vpn.log
     clog -i -s 10000 /var/log/portalauth.log
+    clog -i -s 10000 /var/log/ipsec.log
 else
     clog -i -s 262144 /var/log/system.log
     clog -i -s 262144 /var/log/filter.log
     clog -i -s 32768 /var/log/dhcpd.log
     clog -i -s 32768 /var/log/vpn.log
     clog -i -s 32768 /var/log/portalauth.log
+    clog -i -s 10000 /var/log/ipsec.log
 fi
 
 # change permissions on newly created clog files.
diff --git a/etc/syslog.conf b/etc/syslog.conf
index 03f5022..45786f3 100644
--- a/etc/syslog.conf
+++ b/etc/syslog.conf
@@ -2,7 +2,10 @@ local0.*					%/var/log/filter.log
 local3.*					%/var/log/vpn.log
 local4.*					%/var/log/portalauth.log
 local7.*					%/var/log/dhcpd.log
-*.notice;kern.debug;lpr.info;mail.crit;news.err;local0.none;local3.none;local4.none;local7.none	%/var/log/system.log
-security.*					%/var/log/system.log
+local7.none                                     %/var/log/system.log
+*.notice;kern.debug;lpr.info;mail.crit;         %/var/log/system.log
+news.err;;local3.none;local4.none;              %/var/log/system.log
+local0.none                                     %/var/log/system.log
+security.*					%/var/log/ipsec.log
 auth.info;authpriv.info;daemon.info		%/var/log/system.log
 auth.info;authpriv.info                         |exec /usr/local/sbin/sshlockout_pf