Thanks Evan, Yes, the destination for logging to the remote server is rejecting connection from loghost. I disabled that and it worked. appreciated. James Zhu On Mon, Nov 5, 2012 at 1:03 PM, Evan Rempel <erempel@uvic.ca> wrote:

This means that on "loghost" an connection is being opened to another host and the other host is refusing the connection.

You can look at your destination definitions on loghost and if they are tcp destinations, you can try from loghost

telnet remot_host report_port

and you should see;

loghost% telnet remote_host remote_port Trying 123.456.789.123... telnet: connect to address 123.456.789.123: Connection refused

This would indicate that there is nothing actually running on the remote host that is listening on the port, or that there is a firewall that is rejecting the connection.

Evan. ________________________________________ From: syslog-ng-bounces@lists.balabit.hu [ syslog-ng-bounces@lists.balabit.hu] On Behalf Of Jian Zhu [ zhujian0805@gmail.com] Sent: Sunday, November 04, 2012 8:33 PM To: syslog-ng-request@lists.balabit.hu; Syslog-ng users' and developers' mailing list Subject: [syslog-ng] Please help me on this error --- syslog-ng[4687]: Connection failed; error='Connection refused (111)', time_reopen='10' I don't see where is the problem

Hi,

Anyone know what does this mean? please help

Oct 4 17:02:07 loghost syslog-ng[4687]: Connection failed; error='Connection refused (111)', time_reopen='10' I don't see where is the problem

--

Thanks & Best Regards

James Zhu

Mobile: +86 186 8482 2818

Email: zhujian0805@gmail.com<mailto:zhujian0805@gmail.com>

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq

-- *Thanks & Best Regards* *James Zhu* *Mobile**:* *+86 18**6 8482 2818* *Email: *zhujian0805@gmail.com