[syslog-ng] filter based on IP - catching other IPs?

crayola at optonline.net crayola at optonline.net
Mon Nov 7 19:23:50 CET 2005


I am running syslog-ng 1.6.8 as a central log host. everything is working great.. except for my filters. 

I want to filter all messages from 192.168.10.1 and 192.168.10.2 into other 
locations. 

Unfortunatly I seem to be catching other IP addresses in the filter below. Examples: 192.168.10.151, 192.168.10.197, 192.168.10.22

Is there anything I can do to make this filter more specific without resorting to 
regex. 

filter fw_only { (
                host("192.168.10.1") or
                host("192.168.10.2") 
              ); };

Thanks, 
Mike



More information about the syslog-ng mailing list