| 33 |
- |
1 |
# Common
|
|
|
2 |
#
|
|
|
3 |
|
|
|
4 |
[INCLUDES]
|
|
|
5 |
|
|
|
6 |
after = paths-overrides.local
|
|
|
7 |
|
|
|
8 |
[DEFAULT]
|
|
|
9 |
|
| 70 |
- |
10 |
default_backend = auto
|
|
|
11 |
|
| 33 |
- |
12 |
sshd_log = %(syslog_authpriv)s
|
| 70 |
- |
13 |
sshd_backend = %(default_backend)s
|
| 33 |
- |
14 |
|
|
|
15 |
dropbear_log = %(syslog_authpriv)s
|
| 70 |
- |
16 |
dropbear_backend = %(default_backend)s
|
| 33 |
- |
17 |
|
|
|
18 |
# There is no sensible generic defaults for syslog log targets, thus
|
|
|
19 |
# leaving them empty here so that no errors while parsing/interpolating configs
|
|
|
20 |
syslog_daemon =
|
|
|
21 |
syslog_ftp =
|
|
|
22 |
syslog_local0 =
|
|
|
23 |
syslog_mail_warn =
|
|
|
24 |
syslog_user =
|
| 70 |
- |
25 |
# Set the default syslog backend target to default_backend
|
|
|
26 |
syslog_backend = %(default_backend)s
|
| 33 |
- |
27 |
|
|
|
28 |
# from /etc/audit/auditd.conf
|
|
|
29 |
auditd_log = /var/log/audit/audit.log
|
|
|
30 |
|
|
|
31 |
exim_main_log = /var/log/exim/mainlog
|
|
|
32 |
|
| 70 |
- |
33 |
nginx_error_log = /var/log/nginx/*error.log
|
| 33 |
- |
34 |
|
| 70 |
- |
35 |
nginx_access_log = /var/log/nginx/*access.log
|
| 33 |
- |
36 |
|
|
|
37 |
|
|
|
38 |
lighttpd_error_log = /var/log/lighttpd/error.log
|
|
|
39 |
|
|
|
40 |
# http://www.hardened-php.net/suhosin/configuration.html#suhosin.log.syslog.facility
|
|
|
41 |
# syslog_user is the default. Lighttpd also hooks errors into its log.
|
|
|
42 |
|
|
|
43 |
suhosin_log = %(syslog_user)s %(lighttpd_error_log)s
|
|
|
44 |
|
|
|
45 |
# defaults to ftp or local2 if ftp doesn't exist
|
|
|
46 |
proftpd_log = %(syslog_ftp)s
|
| 70 |
- |
47 |
proftpd_backend = %(default_backend)s
|
| 33 |
- |
48 |
|
|
|
49 |
# http://svnweb.freebsd.org/ports/head/ftp/proftpd/files/patch-src_proftpd.8.in?view=markup
|
|
|
50 |
# defaults to ftp but can be overwritten.
|
|
|
51 |
pureftpd_log = %(syslog_ftp)s
|
| 70 |
- |
52 |
pureftpd_backend = %(default_backend)s
|
| 33 |
- |
53 |
|
|
|
54 |
# ftp, daemon and then local7 are tried at configure time however it is overwriteable at configure time
|
|
|
55 |
#
|
|
|
56 |
wuftpd_log = %(syslog_ftp)s
|
| 70 |
- |
57 |
wuftpd_backend = %(default_backend)s
|
| 33 |
- |
58 |
|
|
|
59 |
# syslog_enable defaults to no. so it defaults to vsftpd_log_file setting of /var/log/vsftpd.log
|
|
|
60 |
# No distro seems to set it to syslog by default
|
|
|
61 |
# If syslog set it defaults to ftp facility if exists at compile time otherwise falls back to daemonlog.
|
|
|
62 |
vsftpd_log = /var/log/vsftpd.log
|
|
|
63 |
|
|
|
64 |
# Technically syslog_facility in main.cf can overwrite but no-one sane does this.
|
|
|
65 |
postfix_log = %(syslog_mail_warn)s
|
| 70 |
- |
66 |
postfix_backend = %(default_backend)s
|
| 33 |
- |
67 |
|
|
|
68 |
dovecot_log = %(syslog_mail_warn)s
|
| 70 |
- |
69 |
dovecot_backend = %(default_backend)s
|
| 33 |
- |
70 |
|
|
|
71 |
# Seems to be set at compile time only to LOG_LOCAL0 (src/const.h) at Notice level
|
|
|
72 |
solidpop3d_log = %(syslog_local0)s
|
|
|
73 |
|
|
|
74 |
mysql_log = %(syslog_daemon)s
|
| 70 |
- |
75 |
mysql_backend = %(default_backend)s
|
| 33 |
- |
76 |
|
| 41 |
- |
77 |
roundcube_errors_log = /var/log/roundcube/errors
|
|
|
78 |
|
| 33 |
- |
79 |
# Directory with ignorecommand scripts
|
|
|
80 |
ignorecommands_dir = /etc/fail2ban/filter.d/ignorecommands
|