From owner-freebsd-questions@FreeBSD.ORG  Wed Jun  4 20:55:56 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5CD9037B401
	for <freebsd-questions@freebsd.org>;
	Wed,  4 Jun 2003 20:55:56 -0700 (PDT)
Received: from perlpimp.codersluts.net (adsl-211-32-175.asm.bellsouth.net
	[68.211.32.175])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 74F4E43FAF
	for <freebsd-questions@freebsd.org>;
	Wed,  4 Jun 2003 20:55:55 -0700 (PDT)
	(envelope-from sektie@codersluts.net)
Received: from perlpimp.codersluts.net (localhost.codersluts.net [127.0.0.1])
	h554tQZC004407;	Wed, 4 Jun 2003 23:55:26 -0500 (EST)
	(envelope-from sektie@codersluts.net)
From: "sektie" <sektie@codersluts.net>
To: Matthew Ryan <matt@overdose.com>, freebsd-questions@freebsd.org
Date: Wed, 4 Jun 2003 23:55:26 -0500
Message-Id: <20030605044850.M9036@codersluts.net>
In-Reply-To: <9B64E2DA-96E4-11D7-9979-0030654886A6@overdose.com>
References: <9B64E2DA-96E4-11D7-9979-0030654886A6@overdose.com>
X-Mailer: Open WebMail 2.01 20030425
X-OriginatingIP: 66.223.56.152 (sektie)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Subject: Re: booteasy / syslog
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Jun 2003 03:55:56 -0000

> Completely unrelated i know, but I am having problems finding how to 
> setup sysogd to accept logs from a remote host, in this case a 
> gateway router at another site. Just a link to   a good how-to would 
> help. I have googled but to no avail.

I have something set up to do that.

Host 1: sacrifical-lamb, running OpenBSD 3.2. (not a fan of OpenBSD, 
obviously.) syslogd is listening on port 514. On your log server, verify 
that when you do a netstat -an you have the following:

udp        0      0  *.514                  *.*

AFAIK, all you have to do is verify that syslogd is running with the -a flag 
to specify an allowed IP. (man syslogd for exact syntax). 

Host 2: perlpimp, running FreeBSD 5. In my syslog.conf, I have a line that 
looks like:

*.*					@sacrificial-lamb

This makes perlpimp log *.* to sacrificial lamb. It's pretty easy to set up, 
providing you don't have any whackass firewalling or other weird stuff going 
on.


Randi