bin/52223: Revision 1.59.2.24 of syslogd stopped to write logs from remote hosts

[Eugene Grosbein]

>Number:         52223
>Category:       bin
>Synopsis:       Revision 1.59.2.24 of syslogd stopped to write logs from remote hosts
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed May 14 05:30:21 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     Eugene Grosbein
>Release:        FreeBSD 4.8-STABLE i386
>Organization:
Svyaz-Service JSC
>Environment:
System: FreeBSD www.svzserv.kemerovo.su 4.8-STABLE FreeBSD 4.8-STABLE #0: Tue May 13 16:38:51 KRAST 2003 eu at www.svzserv.kemerovo.su:/home4/obj/home/src/sys/WWW i386

>Description:
		Yesterday I've updated my 4.8-RC system (30 May 2003)
		to 4.8-STABLE. Now syslogd does not write logs from
		remote hosts. Locally generated logs are written OK.

		I've checked out syslogd's sources from 4.7-RELEASE
		and it started to work again. Then I've found there
		was only one commit to syslogd.c during the period
		since 30 May till now, that's 1.59.2.24.
		It deals with remoted hosts somehow.

>How-To-Repeat:

		Here is my /etc/syslog.conf

# $FreeBSD: src/etc/syslog.conf,v 1.13.2.4 2003/05/12 13:59:23 yar Exp $
#
#	Spaces ARE valid field separators in this file. However,
#	other *nix-like systems still insist on using tabs as field
#	separators. If you are sharing this file between systems, you
#	may want to use only tabs as field separators here.
#	Consult the syslog.conf(5) manpage.

# Local logs
+@
*.err;kern.*;security.info;auth.error;mail.crit	/dev/console
*.notice;kern.*;lpr.info;mail.crit;news.err	/var/log/messages
security.info					/var/log/security
kern.*						/var/log/kernel.log
mail.info					/var/log/maillog
lpr.info					/var/log/lpd-errs
cron.*						/var/log/cron
ftp.info					/var/log/ftpd.log
ftp.debug					/var/log/ftpdebug.log
auth.*;authpriv.*				/var/log/auth.log
auth.=info					|exec /usr/local/adm/syslog/auth.info
local5.*					|exec /usr/local/adm/syslog/local5
*.err						root
*.notice;news.err				root
*.alert						root
*.emerg						*
local0.*					/var/log/local0.log
#local2.*					|exec /usr/local/adm/mrtg/dk-kmk/log2file
local1.*					/var/log/local1.log
local1.err					/dev/console
local3.*					/var/log/local3.log
local4.*					/usr/local/apache/stat/data/admin/rwrlog/riptrace
#portsentry
local5.*					/var/log/local5.log
# uncomment this to log all writes to /dev/console to /var/log/console.log
console.*					/var/log/console.log
# uncomment this to enable logging of all log messages to /var/log/all.log
# touch /var/log/all.log and chmod it to mode 600 before it will work
#*.*						/var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
#*.*						@loghost
# uncomment these if you're running inn
# news.crit					/var/log/news/news.crit
# news.err					/var/log/news/news.err
# news.notice					/var/log/news/news.notice
!startslip
*.*						/var/log/slip.log
!ppp
*.*						/var/log/ppp.log
!pppd
*.*						/var/log/pppd.log
!simple_httpd
daemon.*					/var/log/shd.log
#*.*						/dev/ttyv9

#
# Log from other hosts
#
!*

+gw2.svzserv.kemerovo.su
user.notice					/usr/local/apache/stat/data/admin/rwrlog/reg/syslog
local3.info					/usr/local/apache/stat/data/admin/rwrlog/gpz2/riptrace/riptrace
+mail.svzserv.kemerovo.su
mail.*						/var/log/mail/maillog
local0.*					/var/log/mail/local0
local6.*					/var/log/mail/cyrus.log

+hq.svzserv.kemerovo.su
local6.*					/var/log/mail/mysql_auth.log

+news.svzserv.kemerovo.su
local6.*					/var/log/mail/mysql_auth.log


		Last 7 files are not appended with fresh syslogd from STABLE.
>Fix:

	Unknown for me.
	As workaround, I rolled 1.59.2.24 back. Now syslogd works as before.
>Release-Note:
>Audit-Trail:
>Unformatted: