Hi Laci, Here it goes: root@localhost:~# /usr/sbin/syslog-ng -Fvde $SYSLOGNG_OPTS --cfgfile=/etc/syslog-ng/mgmt-syslog-ng.conf --pidfile=/var/lib/syslog-ng/mgmt-syslog-ng.pid --persist-file=/var/lib/syslog-ng/mgmt-syslog-ng.persist --control=/var/lib/syslog-ng/mgmt-syslog-ng.ctl --version syslog-ng 3 (3.19.1) Config version: 3.19 Installer-Version: 3.19.1 Revision: 3.19.1-5 Compile-Date: May 19 2019 11:03:30 Module-Directory: /usr/lib/syslog-ng/3.19 Module-Path: /usr/lib/syslog-ng/3.19 Include-Path: /usr/share/syslog-ng/include Available-Modules: affile,hook-commands,basicfuncs,afuser,csvparser,date,pseudofile,confgen,json-plugin,linux-kmsg-format,cef,system-source,syslogformat,afsql,appmodel,http,kvformat,afprog,afsocket,afmongodb,sdjournal,cryptofuncs,disk-buffer,dbparser Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Systemd: on Thanks, Alex On Fri, Aug 28, 2020 at 11:58 AM Laszlo Szemere (lszemere) < Laszlo.Szemere@oneidentity.com> wrote:
Hello Alex, Syslog-ng can be compiled with or without IPv6 support. As a first step please verify if it was compiled that way.
If you start Syslog-ng with the "--version" option it will print a little debug information about itself. Among other options there will be a line: "Enable-IPv6"
(If it was compiled with "Enable-IPv6: on", please copy the entire output here. It will help with the later investigation.)
Best regards, Laci ------------------------------ *From:* syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Alexandre Santos <alexandre.rosas.santos@gmail.com> *Sent:* Friday, August 28, 2020 12:35 *To:* Syslog-ng users' and developers' mailing list < syslog-ng@lists.balabit.hu> *Subject:* [syslog-ng] No remote logging with hostname which has address is IPv6
CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.
Hi,
I have configuration, which is sending log messages to a remote hostname (dns6server). The particularity of this remote server is that it is resolved to an IPv6 address.
ping works fine: root@localhost:~# ping dns6server -c 3 PING dns6server(2620:38:4::8:4000:238) 56 data bytes 64 bytes from 2620:38:4::8:4000:238: icmp_seq=1 ttl=63 time=0.354 ms 64 bytes from 2620:38:4::8:4000:238: icmp_seq=2 ttl=63 time=0.264 ms 64 bytes from 2620:38:4::8:4000:238: icmp_seq=3 ttl=63 time=0.310 ms
But syslog-ng seems not to be able to resolve the ipv6 address:
Aug 27 20:58:37 localhost systemd[1]: mgmt-syslog-ng.service: Succeeded.
Aug 27 20:58:37 localhost systemd[1]: Stopped External Logger Daemon.
Aug 27 20:58:37 localhost systemd[1]: Starting External Logger Daemon...
Aug 27 20:58:37 localhost ip[32709]: [2020-08-27T20:58:37.841389] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;
Aug 27 20:58:46 localhost ip[32709]: [2020-08-27T20:58:46.854714] Error resolving hostname; host='dns6server'
Aug 27 20:58:46 localhost ip[32709]: [2020-08-27T20:58:46.854758] Initiating connection failed, reconnecting; time_reopen='60'
Aug 27 20:58:46 localhost systemd[1]: Started External Logger Daemon.
Any Ideas?
I am sending the configuration and debug log in attachment.
Thanks in Advance,
Alex
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq