[syslog-ng]syslog-ng and sendmail

[Serge van Thillo]

Hi people.

I compiled syslog-ng today and tried out some things.
It works quite ok, there only a few things I am missing.

When I log facility mail I only see to adressen. this is the same when I log
everything to one file.
so for example:

Dec 20 02:27:34 linux sendmail[10439]: eBK1RX410437: to=<serge@mydomain.nl>,
delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=38193, dsn=2.0.0,
stat=Sent

Only the line telling me who send the message is missing.

I will include the config file. Can anyone tell me what is wrong?

Thanks in advance.

Greets,
	Serge.
---------------------------------

options { sync (0);
          time_reopen (10);
          log_fifo_size (1000);
          long_hostnames (off);
          use_dns (no);
          use_fqdn (no);
          create_dirs (no);
          keep_hostname (yes);
        };

source s_sys { unix-stream ("/dev/log"); internal(); };

destination console  { file("/dev/console"); };
destination messages { file("/var/log/messages"); };
destination secure   { file("/var/log/secure"); };
destination maillog  { file("/var/log/maillog"); };
destination spooler  { file("/var/log/spooler"); };
destination boot     { file("/var/log/boot.log"); };
destination imap     { file("/var/log/imap.log"); };
destination auth     { file("/var/log/auth.log"); };
destination cron     { file("/var/log/cron"); };
destination console  { file("/dev/console"); };
destination root     { usertty("root"); };
destination allusers { usertty("*"); };
destination all      { file("/var/log/all.log"); };

# Facility Filters
filter f_auth     { facility(auth); };
filter f_authpriv { facility(authpriv); };
filter f_cron     { facility(cron); };
filter f_daemon   { facility(daemon); };
filter f_ftp      { facility(ftp); };
filter f_kern     { facility(kern); };
filter f_lpr      { facility(lpr); };
filter f_mail     { facility(mail); };
filter f_news     { facility(news); };
filter f_security { facility(security); };
filter f_user     { facility(user); };
filter f_uucp     { facility(uucp); };
filter f_local0   { facility(local0); };
filter f_local1   { facility(local1); };
filter f_local2   { facility(local2); };
filter f_local3   { facility(local3); };
filter f_local4   { facility(local4); };
filter f_local5   { facility(local5); };
filter f_local6   { facility(local6); };
filter f_local7   { facility(local7); };

# Level Filters
filter f_emerg    { level(emerg); };
filter f_alert    { level(alert..emerg); };
filter f_crit     { level(crit..emerg); };
filter f_err      { level(err..emerg); };
filter f_warning  { level(warning..emerg); };
filter f_notice   { level(notice..emerg); };
filter f_info     { level(info..emerg); };
filter f_debug    { level(debug..emerg); };

# Filters
filter f_messages { level(info..emerg) and (not facility(mail)) and (not
facility(authpriv)); };

# Log all kernel messages to the console.
log {
  source(s_sys);
  filter(f_kern);
  destination(console);
};

# Log anything (except mail) of level info or higher.
log {
  source(s_sys);
  filter(f_messages);
  destination(messages);
};

# The authpriv file has restricted access.
log {
  source(s_sys);
  filter(f_authpriv);
  destination(secure);
};

# Log all the mail messages in one place.
log {
  source(s_sys);
  filter(f_mail);
  destination(maillog);
};

# Everybody gets emergency messages, plus log them on another machine.
log {
  source(s_sys);
  filter(f_emerg);
  destination(allusers);
};

# Save mail and news errors of level err and higher in a special file.
log {
  source(s_sys);
  filter(f_uucp);
  filter(f_news);
  filter(f_crit);
  destination(spooler);
};

# Save boot messages also to boot.log
log {
  source(s_sys);
  filter(f_local7);
  destination(boot);
};

# Log cyrus imap in seperate file
log {
  source(s_sys);
  filter(f_local6);
  filter(f_debug);
  destination(imap);
};
log {
  source(s_sys);
  filter(f_auth);
  filter(f_debug);
  destination(auth);
};

# Debuging Sending all messages to all.log
log {
  source(s_sys);
  destination(all);
};