Thanks Evan,<br><br>Yes, the destination for logging to the remote server is rejecting connection from loghost.<br>I disabled that and it worked.<br><br>appreciated.<br><br>James Zhu<br><br><div class="gmail_quote">On Mon, Nov 5, 2012 at 1:03 PM, Evan Rempel <span dir="ltr">&lt;<a href="mailto:erempel@uvic.ca" target="_blank">erempel@uvic.ca</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">This means that on &quot;loghost&quot; an connection is being opened to another host and the other host is refusing the connection.<br>

<br>
You can look at your destination definitions on loghost and if they are tcp destinations, you can try from loghost<br>
<br>
telnet remot_host report_port<br>
<br>
and you should see;<br>
<br>
loghost%  telnet remote_host remote_port<br>
Trying 123.456.789.123...<br>
telnet: connect to address 123.456.789.123: Connection refused<br>
<br>
<br>
This would indicate that there is nothing actually running on the remote host that is listening on the port, or that there is a firewall that is rejecting the connection.<br>
<br>
Evan.<br>
________________________________________<br>
From: <a href="mailto:syslog-ng-bounces@lists.balabit.hu">syslog-ng-bounces@lists.balabit.hu</a> [<a href="mailto:syslog-ng-bounces@lists.balabit.hu">syslog-ng-bounces@lists.balabit.hu</a>] On Behalf Of Jian Zhu [<a href="mailto:zhujian0805@gmail.com">zhujian0805@gmail.com</a>]<br>

Sent: Sunday, November 04, 2012 8:33 PM<br>
To: <a href="mailto:syslog-ng-request@lists.balabit.hu">syslog-ng-request@lists.balabit.hu</a>; Syslog-ng users&#39; and developers&#39; mailing list<br>
Subject: [syslog-ng] Please help me on this error --- syslog-ng[4687]: Connection failed; error=&#39;Connection refused (111)&#39;, time_reopen=&#39;10&#39; I don&#39;t see where is the problem<br>
<br>
Hi,<br>
<br>
Anyone know what does this mean? please help<br>
<br>
Oct  4 17:02:07 loghost syslog-ng[4687]: Connection failed; error=&#39;Connection refused (111)&#39;, time_reopen=&#39;10&#39;<br>
I don&#39;t see where is the problem<br>
<br>
--<br>
<br>
Thanks &amp; Best Regards<br>
<br>
James Zhu<br>
<br>
Mobile: +86 186 8482 2818<br>
<br>
Email: <a href="mailto:zhujian0805@gmail.com">zhujian0805@gmail.com</a>&lt;mailto:<a href="mailto:zhujian0805@gmail.com">zhujian0805@gmail.com</a>&gt;<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div><br><br clear="all"><br>-- <br><p><b><a name="SafeHtmlFilter_SafeHtmlFilter__MailAutoSig"><span>Thanks &amp; Best Regards</span></a></b></p>


<p style="color:rgb(0,0,153)"><b><i><span><span style="font-size:10pt">James Zhu</span></span><span><span style="font-size:10pt"></span></span></i></b></p>
<span><span></span></span><span><span></span></span>



<p><span><b><span>Mobile</span></b></span><span><b><span style="font-size:10.0pt;color:#444444">:</span></b></span><span><span> <i style="color:rgb(51,0,51)">+86 18</i></span></span><i style="color:rgb(51,0,51)"><span><span style="font-size:10pt">6</span></span><span><span> </span></span><span><span style="font-size:10pt">8482 2818</span></span></i><span><span style="font-size:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;;color:black"></span></span></p>



<p><span><b><span style="font-size:10pt;color:black">Email: </span></b><span style="font-size:10pt;color:rgb(102,51,51)"><a href="mailto:zhujian0805@gmail.com" target="_blank">zhujian0805@gmail.com</a></span></span></p><br>