From owner-freebsd-security  Thu Jun 14 13:15:59 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.goonda.org (mail.goonda.org [208.37.165.142])
	by hub.freebsd.org (Postfix) with SMTP id 3AE1937B407
	for <freebsd-security@FreeBSD.ORG>; Thu, 14 Jun 2001 13:15:50 -0700 (PDT)
	(envelope-from goonda@bastard.net)
Received: (qmail 27795 invoked from network); 14 Jun 2001 20:15:48 -0000
Received: from unknown (HELO phat.bastard.net) (208.37.165.141)
  by mail.goonda.org with SMTP; 14 Jun 2001 20:15:48 -0000
Received: from localhost (localhost [127.0.0.1])
	by phat.bastard.net (8.11.4/8.11.4) with ESMTP id f5EKFmu56409
	for <freebsd-security@FreeBSD.ORG>; Thu, 14 Jun 2001 16:15:48 -0400 (EDT)
	(envelope-from goonda@bastard.net)
Date: Thu, 14 Jun 2001 16:15:48 -0400 (EDT)
From: anindya <anindya@goonda.org>
To: <freebsd-security@FreeBSD.ORG>
Subject: Re: remote syslog question
In-Reply-To: <3B28F67D.4A1EB608@globalstar.com>
Message-ID: <20010614161245.D56348-100000@phat.bastard.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Fernando P . Schapachnik provided me the answer in email: simply
swap the order of the lines in syslog.conf. Apparently syslogd
matches does specific match first, then processes the rules
top-to-bottom. I knew it had to be something simple ;)

BTW, local0 is the default facility that ipfilter uses,
which is why I am using it in my examples.

Thanks,
--Anindya


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message