Hello, this is a bit off topic but I can't find a good syslog list anymore. This has to do with the old original syslog, sorry :-). I like syslog-ng and use it, but we also have AIX hosts to deal with. One of our applications programmers supposedly found this remote syslog config on a site on how to comply with basic security. I can't seem to convince folks here about why this is wrong. When this config is modeled we do get events. Please comment on the correctnes of the syslog.conf lines below. As you can see, all the remote lines point to the same syslog collector. Many thanks. If there is a more appropriate list to go to, please advise, thanks. auth.info @arcsl1 local7.info @arcsl1 local6.info @arcsl1 auth.* @arcsl1 authpriv.* @arcsl1 local7.* @arcsl1