syslogd became silent between 11.2-PRERELEASE r334874 and r335282
Michael Grimm
trashcan at ellael.org
Sun Jun 17 14:58:17 UTC 2018
On 17. Jun 2018, at 16:50, Gary Palmer <gpalmer at freebsd.org> wrote:
> On Sun, Jun 17, 2018 at 04:27:33PM +0200, Michael Grimm wrote:
>> Host's syslogd can be reached from inside every jail, e.g.:
>>
>> jtest> nc -4vuw 1 10.x.y.z 514
>> Connection to 10.x.y.z 514 port [udp/syslog] succeeded!
>
> UDP is connectionless, so the client has no way of knowing if the
> connection succeeded or not. If you put in port 515 I suspect you'd
> get the same result from your 'nc' attempt.
You are right :-)
> Is syslogd on the host running with '-s'? If so, that'll stop it
> from accepting any remote log events.
No, syslogd at the host is running with the following flags only:
syslogd_flags="-vv -b 10.x.y.z -a 10.x.y.0/24"
All syslogd within jails (empty flags needed to prevent syslogd of opening sockets) ...
syslogd_flags=""
… and /etc/syslog.conf with:
*.* @10.x.y.z
Regards,
Michael
More information about the freebsd-stable
mailing list