Thank you for your input. I am not having an issue with getting the logs from different devices into different log files. What is happening is that in the standard config with the Suse syslog-ng.conf file, it logs all messages in one file, which I would like to keep, but I would like to exclude anything from a remote system. You might be telling me below, but I don't seem to be getting it. Below is out of the syslog-ng.conf, what I would like to do is filter out any remote system from that. filter f_messages { not facility(news, mail) and not filter(f_iptables); }; # # All messages except iptables and the facilities news and mail: # destination messages { file("/var/log/messages"); }; log { source(src); filter(f_messages); destination(messages); }; -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Werner Thal Sent: Tuesday, August 22, 2006 5:59 AM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] netmask Hallo, I try to use the "netmask" filter option to generate seperate logfiles for different subnets. I tried this filter krzn_all { netmask("10.254.0.0/255.255.0.0"); }; this filter krzn_all { netmask(10.254.0.0/255.255.0.0); }; this filter krzn_all { netmask("10.254.0.0/16"); }; and this filter krzn_all { netmask(10.254.0.0/16); }; No errors have been reported starting syslog-ng but also no messages have been logged. I use syslog-ng 2.0rc1-2 on a debian Etch. Kind Regards W. Thal _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html