Changing what source port syslog-ng uses, when sending a syslog
Hi Is there a way to change what source port syslog-ng uses, when it is sending a syslog ? I can see in our firewall log that it uses a high port Deny udp src inside:xxxx/32772 dst outside:xxx/514 by access-group "FromInside4" - Henning
Henning Markussen wrote:
Hi
hi,
Is there a way to change what source port syslog-ng uses, when it is sending a syslog ?
extract from http://www.balabit.com/products/syslog_ng/reference/x354.html#AEN519 Example 3-9. Using the tcp() driver destination d_tcp { tcp("10.1.2.3" port(1999); localport(999)); };
I can see in our firewall log that it uses a high port Deny udp src inside:xxxx/32772 dst outside:xxx/514 by access-group "FromInside4"
you're welcome. GD
- Henning _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
-- Gilles DEMARTY ExaProtect Technology Tél: +33 (0) 4 26 23 25 25 Fax: +33 (0) 4 26 29 99 09 gdemarty(at)exaprotect.com www.exaprotect.com - "Be alert with your alerts"
Hi Thnx for the quick response ! There is a typo in the Example 3-9 destination d_tcp { tcp("10.1.2.3" port(1999); localport(999)); }; I can only get it to work if i use destination d_tcp { tcp("10.1.2.3" port(1999) localport(999)); }; - Henning
Henning Markussen wrote:
Hi
hi,
Is there a way to change what source port syslog-ng uses, when it is sending a syslog ?
extract from http://www.balabit.com/products/syslog_ng/reference/x354.html#AEN519
Example 3-9. Using the tcp() driver
destination d_tcp { tcp("10.1.2.3" port(1999); localport(999)); };
I can see in our firewall log that it uses a high port Deny udp src inside:xxxx/32772 dst outside:xxx/514 by access-group "FromInside4"
you're welcome. GD
- Henning _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
-- Gilles DEMARTY ExaProtect Technology Tél: +33 (0) 4 26 23 25 25 Fax: +33 (0) 4 26 29 99 09 gdemarty(at)exaprotect.com www.exaprotect.com - "Be alert with your alerts" _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
participants (2)
-
Gilles Demarty
-
Henning Markussen