I run a script, that modifies /var/log/security/var/log/security.
If
If someone trytries to connect to my server sshvia ssh, this event writes into /var/log/security/var/log/security.(firewall_enable="YES", firewall_logging="YES" I have set firewall_enable="YES" and firewall_logging="YES" in /etc.rc.conf)
The
The script finds and marks certain lines by adding to the end of the line some symbols (For example, symbol !! ).
But
But after changing the file /var/log/security, ipfw/var/log/security ipfw events are not written to it any more. Only /etc/rc.d/syslogd restart/etc/rc.d/syslogd restart does help.
What can I do?