<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Thanks for the hostname thing, i tryied but it continue to send to the server :<BR>
<BR>
<A href="mailto:src_name@hotname_BOX2">src_name@hotname_BOX2</A> <BR>
<BR>
For the log of BOX1. Let's say hosname of BOX1 is BOX1 et BOX2 is BOX2 and the source name logged is SSH<BR>
<BR>
the Syslog server recieve thoses lines :<BR>
<BR>
Sept 17 - <A href="mailto:SSH@BOX2">SSH@BOX2</A> - myipthere - etc ...<BR>
<BR>
I am connecting to BOX1 and generate logs on BOX1 that relay to BOX2 that relay to syslog server.<BR>
<BR>
any Clue ?<BR><BR>> Date: Wed, 17 Sep 2008 06:56:16 -0700<BR>> From: infosec@gmail.com<BR>> To: syslog-ng@lists.balabit.hu<BR>> Subject: Re: [syslog-ng] Syslog relay tag<BR>> <BR>> Set keep_hostname(yes); on the syslog server.<BR>> <BR>> http://www.campin.net/syslog-ng/faq.html#hostname<BR>> <BR>> On Wed, Sep 17, 2008 at 6:22 AM, Gault Stephane <hqservers@hotmail.com> wrote:<BR>> > Hello there,<BR>> ><BR>> > I got a question about relaying logs from a box to a syslog server through a<BR>> > syslog box relay. My probleme is to get the log tagged with the ip of the<BR>> > first box, here the case :<BR>> ><BR>> ><BR>> > BOX 1 => BOX2 => Syslog server<BR>> ><BR>> > My goal is to relay BOX1 logs to BOX2 ( security probleme, to make BOX1 out<BR>> > of the syslog server zone) and BOX will relay the logs from BOX 1 and 2 to<BR>> > the syslog server.<BR>> ><BR>> > Have you any clue how can i get the IP (or hostname) of the BOX1 included in<BR>> > the logs or file ?<BR>> ><BR>> > When i do This the logs are ok, but they come with the IP of the BOX2 ( the<BR>> > logs of BOX1 ans BOX 2 got the same source IP "BOX2" ).<BR>> ><BR>> > Thanks for your suggestions.<BR>> ><BR>> > S.Gault<BR>> ><BR>> > ________________________________<BR>> > Votre correspondant a choisi Hotmail et profite d'un stockage quasiment<BR>> > illimité. Créez un compte Hotmail gratuitement !<BR>> > ______________________________________________________________________________<BR>> > Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<BR>> > Documentation:<BR>> > http://www.balabit.com/support/documentation/?product=syslog-ng<BR>> > FAQ: http://www.campin.net/syslog-ng/faq.html<BR>> ><BR>> ><BR>> ><BR>> ______________________________________________________________________________<BR>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<BR>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng<BR>> FAQ: http://www.campin.net/syslog-ng/faq.html<BR>> <BR><BR><br /><hr />Souhaitez vous « être au bureau sans y être » ? <a href='http://www.microsoft.com/france/windows/bts/default.mspx' target='_new'>Oui je le veux !</a></body>
</html>