Syslogd question

David Magda dmagda at ee.ryerson.ca
Mon Apr 21 02:26:35 UTC 2014


On Apr 19, 2014, at 18:24, James Welcher <jwelcher at gmail.com> wrote:
[…]
> How can I configure the server to locally log the network connections it
> receives, but NOT to forward these remotely received messages?
[…]
> Anyone know how I can prevent syslogd from hopping/remote forwarding
> nowadays?

From syslog.conf(5):

> A hostname specification of the form `#+hostname' or `+hostname' means the following blocks will be applied to messages received from thespecified hostname.  Alternatively, the hostname specification `#-hostname' or `-hostname' causes the following blocks to be applied to messages from any host but the one specified.  If the hostname is given as `@', the local hostname will be used.  As for program specifications, multiple comma-separated values may be specified for hostname specifications.

	http://www.freebsd.org/cgi/man.cgi?query=syslog.conf

So you should try something like at the end:

	# Send messages from localhost to remotelogger.
	+@
	*.*		@remotelog.example.com

See also:

	https://www.freebsd.org/doc/handbook/configtuning-syslog.html



More information about the freebsd-stable mailing list