Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 1836 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Log settings and email notification

nospamsam
Is there a way to continue to get email notifications on important events like a port scan and stop the hourly spam that I am getting telling me that the firewall is going to delete some logs to make space for more logs?


This thread was automatically locked due to age.
  • 0
    sdarcy,

    login as user root and free some space in
    /var/log. If you do not need old logs
    enter a "rm -f *.gz" in /var/log

    regards
    ollion
  • 0 in reply to ollion
    Thanks, I had already done that.

    A coworker, who knows Unix much better than I, did some poking around for me and found a large number of "hidden" directories in the log file tree. He cleaned them out. It looks like a log and directory was create for every day since we brought this system online over a year ago. There should be a setting that only keeps the last 60 days(or a variable) of logs and overwrites these without spamming the admin with email notifications for basic maintenance.

    I personally believe that a firewall should act like an appliance. Once you configure it they way you want it to function, you should not have to constantly monitor it and clean out the "grease traps". Being able to select the events that you are notified for would help.
Unfiltered HTML