thx, solved that thing already, a little diffrent.. i'm using bernsteins supervise now to keep the stunnel running, stunnel is started with -d localport -r remote log server:port on the client and the syslog-ng logs into tcp(localhost,localport).. regards, thomas