qpopper/syslog.conf help

[ponetguy2]

I am running qpopper daemon for POP3 mail retrieval. When someone
connects to my machine (solaris 9 w/ sendmail) to retrieve their messages I get an entry
appended to /var/adm/messages:

Apr 13 12:04:45 hostname inetd[427]: [ID 317013 daemon.notice] pop3[1514] from 192.168.112 4187

People usually check their mail every 1 to 5 minutes. As a result, I get quite a few of these
messages as you would expect. I would really like to filter these messages.

From looking at various man pages and other resources, qpopper is not
categorized under the mail.* category. Is there any way to filter out
by process? Ideally I want all messages from the qpopper daemon to go
to /var/adm/mail.log.

Here is my qpopper entry in /etc/inetd.conf:

#pop3 stream tcp nowait root /usr/local/sbin/popper qpopper -s
pop3 stream tcp nowait root /usr/local/sbin/popper qpopper -f /usr/local/etc/qpopper.conf

Here is my qpopper.conf:

# This is the qpopper configuration override file
#
# Mail statistics
# Write info message to log file every time user checks email.
# Uncomment for testing only
#set statistics = true

# Put qpopper in server mode for fast performance
set server-mode = true

# For security purposes do not announce banner showing qpopper version
set shy = true

# Turn on fast updates
set fast-update = true

# Turn off reverse lookup of clients IP address
set reverse-lookup = false

# Put qpopper messages in their own log file.
#set log-facility = LOG_MAIL

Here is my syslog.conf:

*.err;kern.notice;auth.notice /dev/console
*.alert root
*.emerg *

#*.debug /var/adm/messages
*.err;kern.debug;daemon.notice /var/adm/messages
mail.debug /var/adm/mail.log


I would really appreciate any assitance in this matter. Plus a good explanation on
how to use log-facility will be great. I'm not sure how to us LOG_MAIL in syslog.conf.

I'm a newbie, so please explain clearly. Don't assume that I don't know.

Thank you

 

[kHz]

Apr 13 12:04:45 hostname inetd[427]: [ID 317013 daemon.notice] pop3[1514] from 192.168.112 4187

*.err;kern.notice;auth.notice /dev/console

You can set daemon.notice to /var/adm/messages in syslog.conf. Be sure to refresh syslogd after the change. Also you need to use a tab in syslog.conf and not a space for field separation.

 

[kHz]

Oops. Mis-read your email and your syslog.conf. Anyway it is the same. your deamon.notice is sending messages to /var/adm/messages. Change that.

 

[ponetguy2]

thanx again for the help khz.

i can't remove daemon.notice from syslog.conf. another alternative that i figured out was editing the inetd file in /etc/default. i disable logging and everything is good again. thank you

# ENABLE_CONNECTION_LOGGING affects the tracing of incoming TCP
# connections, see inetd(1M) for details. The default value is "NO". A
# value of "YES" (any case) results in tracing of connections; any other
# value is ignored.
#
ENABLE_CONNECTION_LOGGING=NO