[syslog-ng] spoof_source not working

[Gerardo Amaya]

Chance Ellis wrote:

> I am running syslog-ng 1.6.8 on Solaris 9. I recompiled with the 
> --enable-spoof-source configure option.
>  
> Here is my config:
>  
> destination d_squelch_acl { udp("10.159.234.52 <http://10.159.234.52>" 
> port(514) spoof_source(yes)); };
> filter f_squelch_acl { match("list squelch denied"); };
> log { source(net); filter(f_squelch_acl); destination(d_squelch_acl);};
> source net { udp(); };
>  
>  
> If I start syslog-ng without spoof_source(yes) option, all messages 
> matching are forwarded to the machine in the destination. If I change 
> to spoof_source(yes) nothing gets forwarded at all. I do not get any 
> errors when I start syslog-ng, like "spoof-source support not compiled 
> in" which I get on other boxes I have not recompiled on yet.
>  
> Any ideas?
>  
> Chance
>  
>  
>
>------------------------------------------------------------------------
>
>_______________________________________________
>syslog-ng maillist  -  syslog-ng at lists.balabit.hu
>https://lists.balabit.hu/mailman/listinfo/syslog-ng
>Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>  
>
when you run the configure did you get in the result?

checking whether to enable spoof_source support....... yes

Sometimes it did not find the library where is suppose to be.  your 
config looks ok. can you confirm on this?

best regards

Gerardo Amaya