From owner-freebsd-current Tue May 26 11:56:00 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA27388 for freebsd-current-outgoing; Tue, 26 May 1998 11:56:00 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from rfcnet.com (rfcnet.com [207.227.20.207]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA27357 for ; Tue, 26 May 1998 11:55:57 -0700 (PDT) (envelope-from mattc@rfcnet.com) Received: (from mattc@localhost) by rfcnet.com (8.8.8/8.8.8) id NAA08632; Tue, 26 May 1998 13:55:04 -0500 (CDT) (envelope-from mattc) Message-ID: <19980526135504.A8612@rfcnet.com> Date: Tue, 26 May 1998 13:55:04 -0500 From: Matthew Cashdollar To: freebsd-current@FreeBSD.ORG Subject: syslog confusion Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91.1i x-no-archive: yes Organization: RF Communications, Inc. http://www.rfcinc.com Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Here is something to ponder... root@ainvar# syslogd -d -a 207.227.20.195 allowaddr: rule 0: numeric, addr = 207.227.20.195, mask = 255.255.255.0; port = 514 off & running.... init cfline("auth.* /var/log/auth", f, "*") cfline("*.* /var/log/ppp", f, "ppp") X X X X 8 X X X X X X X X X X X X X X X X X X X X FILE: /var/log/auth 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE: /var/log/ppp (ppp) logmsg: pri 56, flags 4, from ainvar, msg syslogd: restart syslogd: restarted readfds = 0x38 readfds = 0x38 got a message (1, 0x10) cvthname(207.227.20.195) Host name for your address (207.227.20.195) unknown validate: dgram from IP 207.227.20.195, port 514, name 207.227.20.195; rejected in rule 0 due to IP mismatch. readfds = 0x38 readfds = 0x38 I am trying to do remote logging of auth messages, from a -stable machine to my -current machine at home.. I can get it to work between two stables which have working dns.. 207.227.20.195 has the name bart.rfcnet.com, but reverse dns doesn't work (thank my isp..) could this be the problem?? how can i get around it? is there any way to 'allow all incoming messages', besides editing the source? from the error message above it seems to think that the ip address is a name.. Thanks, -- Matthew Cashdollar RF Communications, Inc. -- http://www.rfcinc.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message