From owner-freebsd-questions  Sun Jan  6 18:17:33 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from smnolde.com (att-98-60-141.atl.mediaone.net [24.98.60.141])
	by hub.freebsd.org (Postfix) with ESMTP id B15FC37B405
	for <freebsd-questions@freebsd.org>; Sun,  6 Jan 2002 18:17:27 -0800 (PST)
Received: from bsd ([192.168.10.7] ident=smn@smnolde.com)
	by smnolde.com with esmtp (Exim 3.30 #1)
	id 16NPLs-000D28-00; Sun, 06 Jan 2002 21:17:28 -0500
Date: Sun, 6 Jan 2002 21:17:27 -0500 (EST)
From: Scott Nolde <scott@smnolde.com>
To: Patrick Gelsema <gelsema@superhero.nl>
Cc: <freebsd-questions@FreeBSD.ORG>
Subject: Re: Logging from a remote system
In-Reply-To: <a1ajj9$oqt$1@news1.xs4all.nl>
Message-ID: <20020106211636.V93879-100000@bsd.smnolde.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

smacked into the keyboard previously by owner-freebsd-questions@FreeBSD.ORG:

 >Date: Sun, 6 Jan 2002 23:37:28 +0100
 >From: Patrick Gelsema <gelsema@superhero.nl>
 >To: freebsd-questions@FreeBSD.ORG
 >Subject: Logging from a remote system
 >
 >Hi,
 >
 >i've got a firewallbox (router.superhero.nl, 2 nics) which keeps my internet
 >connection up and running. On the machine itself i enabled forwarding of
 >messages to my FreeBsd 4.4 box. On this machine i get no errors.
 >
 >the command i used is: syslogd -R 192.168.163.25 -O /dev/null
 >
 >This worked with Kiwi Enterprise logs, however since i lately installed an
 >FreeBSD machine i want to use the build in capabilities of this server.
 >
 >On 192.168.163.25 box i changed the syslog.conf and added the following
 >lines at the end of the file
 >
 >+router.superhero.nl
 >*.*                        /var/log/router
 >+192.168.254.100
 >*.*                        /var/log/router
 >
 >
 >i killed the syslog daemon and started it manually by
 >
 >syslogd -a 192.168.254.0/24
 >
 >No errors are displayed on the screen. The firewallbox doesnt complain
 >either. However i cannot log messages from these machine to /var/log/router,
 >and yeah, the file has been touched.
 >
 >Am i doing something wrong ?
 >
 >If anyone could shed a light on this, i would be thankful
 >
 >With friendly regards,
 >
 >Patrick Gelsema
 >

Try using syslog-ng from port, it may work better.  I had similar problems
with syslog when logging from a cisco router.

Scott Nolde
GPG Key 0xD869AB48


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message