Ian D. Leroux <idleroux <at> MIT.EDU> writes: > As I understand it, that's a mechanism to ignore *more* than the > default. Does it give me a way to ignore *less*, short of manually > deleting the existing rule files? You can change the default rule location to somewhere else if you don't want to use debian's rules: /etc/logcheck.conf: # Controls the base directory for rules file location # This must be an absolute path #RULEDIR="/etc/logcheck"