Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Jun 2001 13:10:19 -0400 (EDT)
From:      anindya <anindya@goonda.org>
To:        <freebsd-security@FreeBSD.ORG>
Subject:   Re: remote syslog question
Message-ID:  <20010614131003.B55181-100000@phat.bastard.net>

next in thread | raw e-mail | index | archive | help
> What does the syslog.conf(5) on the log host look like? What does
> it do with the local0 facility?

I have a default syslog.conf on the loghost, and have simply added
one line:

local0.*			/var/log/ipflog

If you do a tcpdump(8), do you see
> the local0 messages leaving the firewall and getting to the log host?

Yes, every other type of syslog message goes to the loghost no problems.
Also, if I comment out the local0.* line on the firewall,
I start getting ipf messages, so its all working correctly,
the real question is, is it possible to send local0.* to
both places?

thanks,
--Anindya



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010614131003.B55181-100000>