From owner-freebsd-questions@freebsd.org Tue Jan 15 12:20:33 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 78D291488AC3 for ; Tue, 15 Jan 2019 12:20:33 +0000 (UTC) (envelope-from SRS0=Sx/a=PX=perdition.city=julien@bebif.be) Received: from orval.bbpf.belspo.be (orval.bbpf.belspo.be [193.191.208.90]) by mx1.freebsd.org (Postfix) with ESMTP id 9576884DF9 for ; Tue, 15 Jan 2019 12:20:32 +0000 (UTC) (envelope-from SRS0=Sx/a=PX=perdition.city=julien@bebif.be) Received: from mordor.lan (213.219.145.216.adsl.dyn.edpnet.net [213.219.145.216]) by orval.bbpf.belspo.be (Postfix) with ESMTPSA id EB73B1D4FC18 for ; Tue, 15 Jan 2019 13:20:30 +0100 (CET) Date: Tue, 15 Jan 2019 13:20:29 +0100 From: Julien Cigar To: freebsd-questions@freebsd.org Subject: Re: freebsd remote logging Message-ID: <20190115122029.GK4293@mordor.lan> References: <20190114152246.GH4293@mordor.lan> <20190115100943.GJ4293@mordor.lan> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="4wkndigzIeYF6Hbg" Content-Disposition: inline In-Reply-To: <20190115100943.GJ4293@mordor.lan> User-Agent: Mutt/1.11.1 (2018-12-01) X-Rspamd-Queue-Id: 9576884DF9 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of SRS0=Sx/a=PX=perdition.city=julien@bebif.be designates 193.191.208.90 as permitted sender) smtp.mailfrom=SRS0=Sx/a=PX=perdition.city=julien@bebif.be X-Spamd-Result: default: False [-4.30 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; DMARC_NA(0.00)[perdition.city]; MX_GOOD(-0.01)[cached: mx1.bebif.be]; NEURAL_HAM_SHORT(-0.13)[-0.132,0]; RCVD_IN_DNSWL_NONE(0.00)[90.208.191.193.list.dnswl.org : 127.0.10.0]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30)[julien@perdition.city,SRS0=Sx/a=PX=perdition.city=julien@bebif.be]; RCVD_NO_TLS_LAST(0.10)[]; RECEIVED_SPAMHAUS_PBL(0.00)[216.145.219.213.zen.spamhaus.org : 127.0.0.11]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; ASN(0.00)[asn:2611, ipnet:193.191.192.0/19, country:BE]; FROM_NEQ_ENVFROM(0.00)[julien@perdition.city,SRS0=Sx/a=PX=perdition.city=julien@bebif.be]; IP_SCORE(-0.16)[asn: 2611(-0.79), country: BE(0.00)]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jan 2019 12:20:33 -0000 --4wkndigzIeYF6Hbg Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jan 15, 2019 at 11:09:43AM +0100, Julien Cigar wrote: > On Mon, Jan 14, 2019 at 04:22:46PM +0100, Julien Cigar wrote: > > Hello, > >=20 > > I have a jail "logging" with the following configuration: > > https://gist.githubusercontent.com/silenius/a1c4fb1e67d6e62943aa3b7124f= fe748/raw/e1f62b55e776958e3a0f8ebee53f38d6c24dd0d1/gistfile1.txt > >=20 > > for some unknown reasons nothing gets logged to /var/log/haproxy*.log, > > although the logs are received. > >=20 > > When I'm adding -d flags to syslgod I'm getting the following: > > https://gist.githubusercontent.com/silenius/f7a813b665a1e0cab848e45a15a= 336b9/raw/5e527aca3482dade02af5588c5b50cfc554a3143/gistfile1.txt > >=20 > > any idea what's wrong? I don't understand why the rule is > > matched/accepted but no "Logging to FILE" happens .. > >=20 > > does something changed between 10.3 and 12.0 regarding this ? >=20 > this is really weird, I've tried everything and it doesn't work, is it=20 > possible that there is some regression in the 12.0-RELEASE? the same > config worked in 10.4-RELEASE. >=20 > dns and reverse dns work are configured properly, tcpdumping the HOST=20 > confirms that packets arrive as expected from the remote host (HAProxy), > launching the syslogd in the jail with -d confirms that messages arrive > and are parsed by syslogd but... nothing is logged to dedicated files > (except the ones from 11:01:25.185982 IP 192.168.10.34.514 > > 10.209.1.31.514: SYSLOG local6.error, length: 246) FYI I finally found the problem, see https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D234968#c1 >=20 > >=20 > > Thanks, > > Julien > >=20 > > --=20 > > Julien Cigar > > Belgian Biodiversity Platform (http://www.biodiversity.be) > > PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 > > No trees were killed in the creation of this message. > > However, many electrons were terribly inconvenienced. >=20 >=20 >=20 > --=20 > Julien Cigar > Belgian Biodiversity Platform (http://www.biodiversity.be) > PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 > No trees were killed in the creation of this message. > However, many electrons were terribly inconvenienced. --=20 Julien Cigar Belgian Biodiversity Platform (http://www.biodiversity.be) PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. --4wkndigzIeYF6Hbg Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE7vn2l0to0nV7EWolsrs3EKIEI8AFAlw90AkACgkQsrs3EKIE I8DYSg/+NBUcGPnYRLymKG9O5on1jER9Eg64JbTxi1ZxqMS8ynl3JzasREpSNB4F rjULBZJccnVoeCRICaGZB9tKoVdndkLpGUMMi1ziGgMLldZDuJl3R3/N/Zq61QSH mUqnLDBBPkFp3zK3VEfAxTWg9uk2fIHQnD2TBLhF1Zwje2TLQnJU2DifM4lnF7ce MlwTkZNsws88Wwrxk8HsLVAYQWEP2oD8LVB+Q2QEUKJ5DsG/Rr5AsXR64938hvKZ cqo6/nxBamG0DOAMIqQV6e+qx/RU6bUDwT0RB1wGy1kjRvBfyw70xhOSlKzYJVKQ Nrp7CJ03mUEkC6UaxTPlyfSEg9IiCTnrO1aVsPeYB/UdPu7xFT2MZyWFzitJ1V39 n4P6GPHoJld+R4dpZY6xlJeb6YVsdi7K+V9MCFd0oELibvp6CUgbUurZSrsuNGjp PW34aXvatbFwqFRjFLw6Vij4+GcYUZm9mqLZeFwkaWFt4Mkkg54CLL+Op2s6gJDv wi/zvwZ3Xl1ddm1RQzD5OKP4+421TbMqfvV/pFi2utc7Uw0O/YAr82T2OXLBMu0n ys4pQA5j5TYyjr4TOxXEXrOyFw6k54LODsEHefQ+3p0Gu+R0XAhQF7J3fw8XQ0bV eLWM8ZSPvfthRzHW+TledhVmGFEv7W2nhETFQnS/9BpjmkjBXuE= =y0zo -----END PGP SIGNATURE----- --4wkndigzIeYF6Hbg--