Date: Thu, 14 Jun 2001 09:56:06 -0700 From: "Crist Clark" <crist.clark@globalstar.com> To: anindya <anindya@goonda.org> Cc: freebsd-security@FreeBSD.ORG Subject: Re: remote syslog question Message-ID: <3B28ECA6.C29995BF@globalstar.com> References: <20010614123656.K55091-100000@phat.bastard.net>
next in thread | previous in thread | raw e-mail | index | archive | help
anindya wrote: > > Hi folks, > > I've been running a very nice 4.3-STABLE system with > IPF as my firewall for some time now, without problems. Of > course I am sending my syslogs to a remote host, but > I want to keep an additional copy of the ipf logs locally. > My syslog.conf has just 2 lines: > > *.* @loghost > local0.* /var/log/ipflog > > I was guessing that the local0.* stuff would be sent to > both places, but that is not the case; I don't get > ipf logs on my loghost. [snip] What does the syslog.conf(5) on the log host look like? What does it do with the local0 facility? If you do a tcpdump(8), do you see the local0 messages leaving the firewall and getting to the log host? -- Crist J. Clark Network Security Engineer crist.clark@globalstar.com Globalstar, L.P. (408) 933-4387 FAX: (408) 933-4926 The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact postmaster@globalstar.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B28ECA6.C29995BF>