From owner-freebsd-isp Wed Oct 16 10: 7:20 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BCF4A37B401 for ; Wed, 16 Oct 2002 10:07:18 -0700 (PDT) Received: from platinum.daweb.net (platinum.daweb.net [217.158.56.20]) by mx1.FreeBSD.org (Postfix) with ESMTP id B912743EA9 for ; Wed, 16 Oct 2002 10:07:17 -0700 (PDT) (envelope-from jk@burstfire.net) Received: from platinum.daweb.net (localhost [127.0.0.1]) by platinum.daweb.net (8.12.6/8.12.6) with ESMTP id g9GH73YR064237 for ; Wed, 16 Oct 2002 18:07:03 +0100 (BST) (envelope-from jk@burstfire.net) Received: from localhost (jk@localhost) by platinum.daweb.net (8.12.6/8.12.6/Submit) with ESMTP id g9GH6wJc064234 for ; Wed, 16 Oct 2002 18:06:58 +0100 (BST) X-Authentication-Warning: platinum.daweb.net: jk owned process doing -bs Date: Wed, 16 Oct 2002 18:06:58 +0100 (BST) From: Jess Kitchen X-X-Sender: jk@platinum.daweb.net To: Freebsd Subject: Re: logging In-Reply-To: <3DAD496E.7A8EBB78@tcworks.net> Message-ID: <20021016173823.S62516-100000@platinum.daweb.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, 16 Oct 2002, Chris Cook wrote: [snip] > syslogd -a "ip address" > > it will not log from localhosts... it WILL log from hosts on a different > subnet. any ideas? Hi Chris, Try this in rc.conf syslogd_enable="YES" syslogd_flags="-a 1.2.3.0/23:*" If you have rogue devices on your network that don't originate packets from port 514 you should use the wildcard option in this case. -b will set the bind address, which obviously will break @localhost logging though you wouldn't be doing that anyway. Additionally you can stack the -a option, "-a x.x.1.1 -a x.x.2.1" but I think as default it will accept from a whole /24 if you only specify an IP without a mask. In any case, -d will spew debug output to stdout(err?) so you can see if its being refused or just lost locally due to syslog.conf being broken. Cheers, J. -- Jess Kitchen http://www.burstfire.net/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message