<div dir="ltr"><div><div><div><div><div><div>Hi James!<br><br></div>Check out the source from <a href="https://github.com/balabit/syslog-ng">https://github.com/balabit/syslog-ng</a>, enter the source directory,<br></div>and use the following command:<br>
</div>./autogen.sh && ./configure --enable-spoof-source && make && sudo make install.<br><br></div>You should have the libnet dev package on your system to be able to compile with enable spoof-source,<br>
it is called libnet1-dev on my Ubuntu.<br><br></div>Hope I could help,<br></div>Viktor<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Jul 7, 2014 at 7:56 PM, James Lay <span dir="ltr"><<a href="mailto:jlay@slave-tothe-box.net" target="_blank">jlay@slave-tothe-box.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">On 2014-06-27 12:29, James Lay wrote:<br>
> Hey all,<br>
><br>
> So I've looked around and I'm just not sure what the best method is<br>
> for<br>
> forwarding syslog messages. I have a current setup that is working<br>
> well. I'd like to try and get all the messages forward to another<br>
> machine using standard udp 514. I'd like the messages to appear as<br>
> if<br>
> they are coming from the originating machine, not the syslog server.<br>
> I<br>
> did see a couple sites that say I have to compile with spoofing. Can<br>
> anyone point me to some resources to do this? Thank you.<br>
><br>
> James<br>
<br>
</div>No takers on this?<br>
<div class="HOEnZb"><div class="h5">______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</div></div></blockquote></div><br></div>