[syslog-ng]where docs on *REMOTE* logging using ssh??

Nate Campi nate@campin.net
Wed, 5 Feb 2003 14:07:23 -0800


On Wed, Feb 05, 2003 at 10:04:43AM -0500, Brian Landers wrote:
>
> This is only an issue if you don't take the time to setup the
> tunnel properly.  Use a non-root account created only for the
> purpose of tunnels (with a locked password and a bogus shell),
> setup the authorized_keys file with command="/bin/false" so
> they CAN'T run any commands, and then use the -N flag to ssh
> to not execute a remote command when you setup the tunnels.

The point is that stunnel solves the problems that need addressing with
using ssh (not giving shell access, automatic reconnects). I've already
stated that I use SSH tunnels, I usually don't recommend them as a
starting point when it appears people are struggling with getting their
whole loghost system up and running.
-- 
Nate Campi    http://www.campin.net