Date: Tue, 26 May 1998 13:55:04 -0500 From: Matthew Cashdollar <mattc@rfcnet.com> To: freebsd-current@FreeBSD.ORG Subject: syslog confusion Message-ID: <19980526135504.A8612@rfcnet.com>
next in thread | raw e-mail | index | archive | help
Here is something to ponder...
root@ainvar# syslogd -d -a 207.227.20.195
allowaddr: rule 0: numeric, addr = 207.227.20.195, mask = 255.255.255.0; port = 514
off & running....
init
cfline("auth.* /var/log/auth", f, "*")
cfline("*.* /var/log/ppp", f, "ppp")
X X X X 8 X X X X X X X X X X X X X X X X X X X X FILE: /var/log/auth
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE: /var/log/ppp (ppp)
logmsg: pri 56, flags 4, from ainvar, msg syslogd: restart
syslogd: restarted
readfds = 0x38
readfds = 0x38
got a message (1, 0x10)
cvthname(207.227.20.195)
Host name for your address (207.227.20.195) unknown
validate: dgram from IP 207.227.20.195, port 514, name 207.227.20.195;
rejected in rule 0 due to IP mismatch.
readfds = 0x38
readfds = 0x38
I am trying to do remote logging of auth messages, from a -stable machine to
my -current machine at home.. I can get it to work between two stables which
have working dns..
207.227.20.195 has the name bart.rfcnet.com, but reverse dns doesn't work
(thank my isp..) could this be the problem?? how can i get around it?
is there any way to 'allow all incoming messages', besides editing the source?
from the error message above it seems to think that the ip address is a name..
Thanks,
--
Matthew Cashdollar <mattc@rfcnet.com>
RF Communications, Inc. -- http://www.rfcinc.com
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980526135504.A8612>