[syslog-ng] spoof_source not working

Gerardo Amaya joseg at galileo.edu
Tue Oct 4 16:41:30 CEST 2005


Chance Ellis wrote:

> I am running syslog-ng 1.6.8 on Solaris 9. I recompiled with the 
> --enable-spoof-source configure option.
>  
> Here is my config:
>  
> destination d_squelch_acl { udp("10.159.234.52 <http://10.159.234.52>" 
> port(514) spoof_source(yes)); };
> filter f_squelch_acl { match("list squelch denied"); };
> log { source(net); filter(f_squelch_acl); destination(d_squelch_acl);};
> source net { udp(); };
>  
>  
> If I start syslog-ng without spoof_source(yes) option, all messages 
> matching are forwarded to the machine in the destination. If I change 
> to spoof_source(yes) nothing gets forwarded at all. I do not get any 
> errors when I start syslog-ng, like "spoof-source support not compiled 
> in" which I get on other boxes I have not recompiled on yet.
>  
> Any ideas?
>  
> Chance
>  
>  
>
>------------------------------------------------------------------------
>
>_______________________________________________
>syslog-ng maillist  -  syslog-ng at lists.balabit.hu
>https://lists.balabit.hu/mailman/listinfo/syslog-ng
>Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>  
>
when you run the configure did you get in the result?

checking whether to enable spoof_source support....... yes

Sometimes it did not find the library where is suppose to be.  your 
config looks ok. can you confirm on this?

best regards

Gerardo Amaya


More information about the syslog-ng mailing list