From owner-freebsd-stable Mon Aug 7 7:59:15 2000 Delivered-To: freebsd-stable@freebsd.org Received: from pebkac.owp.csus.edu (pebkac.owp.csus.edu [130.86.232.245]) by hub.freebsd.org (Postfix) with ESMTP id 4278737B649 for ; Mon, 7 Aug 2000 07:59:09 -0700 (PDT) (envelope-from joseph.scott@owp.csus.edu) Received: from localhost (scottj@localhost) by pebkac.owp.csus.edu (8.9.3/8.9.3) with ESMTP id HAA73649; Mon, 7 Aug 2000 07:58:56 -0700 (PDT) (envelope-from joseph.scott@owp.csus.edu) Date: Mon, 7 Aug 2000 07:58:56 -0700 (PDT) From: Joseph Scott X-Sender: scottj@pebkac.owp.csus.edu To: Gregory Bond Cc: stable@FreeBSD.ORG Subject: Re: logging kern.info to remote machine In-Reply-To: <200008070808.SAA03793@lightning.itga.com.au> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, 7 Aug 2000, Gregory Bond wrote: > We're having strife setting up syslog so that kern.info messages (in > particular, output from ipfw and log_in_vain) are logged to a remote machine. > > Running "syslog -d" on both machines, and then "logger -p kern.info test" on > the source machine, we see the packet is received by syslogd on the loghost, > But it is never logged anywhere. This is despite the line in syslog.conf that > says > *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages > > However a message at kern.err _is_ properly logged on the loghost by this rule > (presumably because it is trapped by the "*.notice" clause). > > Any clues? > > We'll do some more debugging in the morning and submit a PR once we have > something more concrete. You don't mention what version of FreeBSD you are using. Not too long ago the default flags for syslogd were changed to include -s which disables the logging of syslog messages from remote machines. You may want to look at that and the -a flag for syslogd. --- Joseph Scott joseph.scott@owp.csus.edu The Office Of Water Programs - CSU Sacramento To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message