I am having a strange problem. Events that come from A through B finally to C, get labeled with A's address, but events that come from A to C directly get labeled with C's address. I always want the address to be A's address. Note that B is running syslog-ng 1.4 (not for any good reason - it is just the state of things right now). Is there something wrong with my options? Brian ====================================================================== options { dir_perm(0755); perm(0644); sync(1); use_dns(no); use_fqdn(no); chain_hostnames(yes); long_hostnames(no); keep_hostname(yes); };