syslogd appears to be running, but not klogd which logs kernel firewall messages to syslog. You should ensure that klogd is running

When you run a CSF firewall to check your server's security, sometimes you get below mentioned warning, especially on a VPS running OpenVZ

syslogd appears to be running, but not klogd which logs kernel firewall messages to syslog. You should ensure that klogd is running



Typically, VPS servers have this disabled and you should check and edit /etc/init.d/syslog and make sure that any klogd lines are not commented out.

Do the following steps to resolve the issue.
If VPS edit /etc/init.d/syslog,


1. Root login to the server via WinSCP or if  in ssh you can use nano -c /etc/init.d/syslog


2. Edit /etc/init.d/syslog


3. Search the line below, (nearly at line # 42)
passed klogd skipped #daemon klogd $KLOGD_OPTIONS

4. Change it to be lines below,
passed klogd skipped
daemon klogd $KLOGD_OPTIONS


5. Now search 'status klogd' and then un-comment it.

6. Now search '#killproc klogd' and chnage it to be 'killproc klogd'


7. Restart syslog via /etc/init.d/syslog restart

This should fix the issue.

To checks, try this command :
more /etc/init.d/syslog|grep klogd


It now should return output like below :



# syslog        Starts syslogd/klogd.
[ -x /sbin/klogd ] || exit 5
passed klogd skipped
daemon klogd $KLOGD_OPTIONS
passed klogd skipped
killproc klogd
status klogd
    echo -n "Reloading klogd..."
    klog=`cat /var/run/klogd.pid 2>/dev/null`

If you change the file, remember to restart syslog via /etc/init.d/syslog restart