[syslog-ng]RE: weird... please help

Fri, 9 Nov 2001 09:07:18 +0800

This is a multipart message in MIME format.
--=_alternative 0006275D48256AFF_=
Content-Type: text/plain; charset="us-ascii"

Thanks,
that works...

Cheers,

Bret

"Baltasar Cevc" <baltasar@cevc-topp.de>        09/11/2001 06:01
Sent by: syslog-ng-admin@lists.balabit.hu
Please respond to syslog-ng

To:     <syslog-ng@lists.balabit.hu>
cc:     (bcc: WATSON Bret/Mgr/CSM/ST Group)
Subject: RE: [syslog-ng]weird... please help

Hi, Bret!

> But what happens is that everything ends up in teh "all" destination
instead of the vpn destination....
It should end to be shown in both...

Try to add ".*" to your host check regexp. Perhaps it doesn't match 
because
there is something more than the single host IP.

And for the all destination: you could use a third filter like this to
prevent VPN messages getting there like this:
      filter fallb {
         not (filter (f_vpnhosts) or filter (f_vpnhosts2));
      };

bye.baltasar

::: B A L T A S A R   C E V C
mailto: baltasar@cevc-topp.de
Tel.: +49 89 99020515

_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng

--=_alternative 0006275D48256AFF_=
Content-Type: text/html; charset="us-ascii"

<br><font size=2 face="sans-serif">Thanks,</font>
<br><font size=2 face="sans-serif">that works...</font>
<br>
<br><font size=2 face="sans-serif">Cheers,</font>
<br>
<br><font size=2 face="sans-serif">Bret</font>
<br>
<br>
<br>
<br>
<br><font size=2 color=blue face="sans-serif"><b>&quot;Baltasar Cevc&quot; &lt;baltasar@cevc-topp.de&gt;</b></font><font size=2 face="sans-serif"> &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=2 color=blue face="sans-serif">09/11/2001 06:01</font>
<br><font size=1 color=blue face="sans-serif">Sent by: syslog-ng-admin@lists.balabit.hu</font>
<p><font size=1 face="sans-serif">Please respond to syslog-ng</font>
<table width=100%>
<tr valign=top>
<td>
<td><font size=1 face="sans-serif">To: &nbsp; &nbsp; &nbsp; &nbsp;&lt;syslog-ng@lists.balabit.hu&gt;</font>
<br><font size=1 face="sans-serif">cc: &nbsp; &nbsp; &nbsp; &nbsp;(bcc: WATSON Bret/Mgr/CSM/ST Group)</font>
<br><font size=1 face="sans-serif">Subject: RE: [syslog-ng]weird... please help</font>
<td>
<br>
<tr valign=top>
<td>
<td>
<td></table>
<br>
<br>
<br>
<br>
<br><font size=2 face="Courier New">Hi, Bret!<br>
<br>
&gt; But what happens is that everything ends up in teh &quot;all&quot; destination<br>
instead of the vpn destination....<br>
It should end to be shown in both...<br>
<br>
Try to add &quot;.*&quot; to your host check regexp. Perhaps it doesn't match because<br>
there is something more than the single host IP.<br>
<br>
And for the all destination: you could use a third filter like this to<br>
prevent VPN messages getting there like this:<br>
 &nbsp; &nbsp; &nbsp;filter fallb {<br>
 &nbsp; &nbsp; &nbsp; &nbsp; not (filter (f_vpnhosts) or filter (f_vpnhosts2));<br>
 &nbsp; &nbsp; &nbsp;};<br>
<br>
<br>
bye.baltasar<br>
<br>
<br>
::: B A L T A S A R &nbsp; C E V C<br>
mailto: baltasar@cevc-topp.de<br>
Tel.: +49 89 99020515<br>
<br>
<br>
_______________________________________________<br>
syslog-ng maillist &nbsp;- &nbsp;syslog-ng@lists.balabit.hu<br>
https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>
</font>
<br>
<br>
<br>
--=_alternative 0006275D48256AFF_=--