https://bugzilla.balabit.com/show_bug.cgi?id=266 --- Comment #2 from Sebastiaan Hoogeveen <zebaz@xs4all.nl> 2013-12-18 20:22:14 --- According to the documentation port() and destport() do the same although I agree the latter is more clear. Just for the sake of the argument I simplified the configuration to just report internal messages with the same result: @version: 3.5 source src { internal(); }; destination messages { file("/var/log/messages"); }; destination logcentral { tcp("logcentral" destport(514) localport(1014)); }; log { source(src); destination(logcentral); }; I did confirm the port numbers used with netstat on the *destination* host (so any weird problem with the machine on which the fault syslog runs is ruled out) and the source ports used are high port numbers (at this moment 60337, 52579 and 58624). -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.