From owner-freebsd-security  Thu Jun 14 15: 9:33 2001
Delivered-To: freebsd-security@freebsd.org
Received: from ns1.via-net-works.net.ar (ns1.via-net-works.net.ar [200.10.100.10])
	by hub.freebsd.org (Postfix) with ESMTP id A434F37B403
	for <freebsd-security@FreeBSD.ORG>; Thu, 14 Jun 2001 15:09:27 -0700 (PDT)
	(envelope-from fschapachnik@vianetworks.com.ar)
Received: (from fpscha@localhost)
	by ns1.via-net-works.net.ar (8.9.3/8.9.3) id TAA04709;
	Thu, 14 Jun 2001 19:09:25 -0300 (ART)
X-Authentication-Warning: ns1.via-net-works.net.ar: fpscha set sender to fschapachnik@vianetworks.com.ar using -f
Date: Thu, 14 Jun 2001 19:09:24 -0300
From: "Fernando P . Schapachnik" <fschapachnik@vianetworks.com.ar>
To: Crist Clark <crist.clark@globalstar.com>
Cc: anindya <anindya@goonda.org>, freebsd-security@FreeBSD.ORG
Subject: Re: remote syslog question
Message-ID: <20010614190924.A2857@ns1.via-net-works.net.ar>
References: <20010614161245.D56348-100000@phat.bastard.net> <3B292302.53CB3461@globalstar.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
User-Agent: Mutt/1.2.5i
In-Reply-To: <3B292302.53CB3461@globalstar.com>; from crist.clark@globalstar.com on Thu, Jun 14, 2001 at 01:48:02PM -0700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

En un mensaje anterior, Crist Clark escribió:
> anindya wrote:
> > 
> > Fernando P . Schapachnik provided me the answer in email: simply
> > swap the order of the lines in syslog.conf. Apparently syslogd
> > matches does specific match first, then processes the rules
> > top-to-bottom. I knew it had to be something simple ;)
> 
> Huh? This sounds like a bug to me. I don't see how order of lines can 
> (or should) matter within a block. OTOH, the documentation may be lacking 
> here.

It is *some how* documented in syslog.conf(5). See the paragraph
about comparison flags and the meaning of `*'.

Regards.


Fernando P. Schapachnik
Planificación de red y tecnología
VIA NET.WORKS ARGENTINA S.A.
fschapachnik@vianetworks.com.ar
Tel.: (54-11) 4323-3381

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message