[syslog-ng] spoof_source not working

[Chance Ellis]

Can someone please point me in a direction on where I could get some help
with this?

On 10/6/05, Chance Ellis <chance.ellis at gmail.com> wrote:
>
> Has anyone else had problems doing spoof_source on Solaris 9???
>
>
>  On 10/4/05, Chance Ellis <chance.ellis at gmail.com> wrote:
> >
> > Here is just a snippet from the configure output:
> >
> > checking pthread.h presence... yes
> > checking for pthread.h... yes
> > checking for pthread_create in -lpthread... yes
> > checking whether to enable Sun STREAMS support... yes
> > checking whether to enable Sun door support... yes
> > checking whether to enable TCP wrapper support... no
> > checking whether to enable spoof_source support... yes
> > checking how to enable static linking for certain libraries... no clues,
> > linking
> > everything dynamically, please send appropriate ld arguments to
> > syslog-ng at lists
> > .balabit.hu
> > checking libol version >= 0.3.16... ok
> > configure: creating ./config.status
> > config.status: creating Makefile
> > config.status: creating src/Makefile
> > config.status: creating src/tests/Makefile
> > config.status : creating doc/Makefile
> > config.status : creating doc/sgml/Makefile
> > config.status: creating contrib/Makefile
> > config.status: creating syslog-ng.spec
> > config.status: creating src/config.h
> > config.status: src/config.h is unchanged
> > config.status: executing depfiles commands
> >   Am I still missing something? This work on my Solaris 8 server, but
> > not on my Solaris 9 box.
> >  Thanks!
> >  On 10/4/05, Gerardo Amaya <joseg at galileo.edu > wrote:
> > >
> > > Chance Ellis wrote:
> > >
> > > > I am running syslog-ng 1.6.8 on Solaris 9. I recompiled with the
> > > > --enable-spoof-source configure option.
> > > >
> > > > Here is my config:
> > > >
> > > > destination d_squelch_acl { udp("10.159.234.52<http://10.159.234.52/><http://10.159.234.52
> > > >"
> > > > port(514) spoof_source(yes)); };
> > > > filter f_squelch_acl { match("list squelch denied"); };
> > > > log { source(net); filter(f_squelch_acl);
> > > destination(d_squelch_acl);};
> > > > source net { udp(); };
> > > >
> > > >
> > > > If I start syslog-ng without spoof_source(yes) option, all messages
> > > > matching are forwarded to the machine in the destination. If I
> > > change
> > > > to spoof_source(yes) nothing gets forwarded at all. I do not get any
> > >
> > > > errors when I start syslog-ng, like "spoof-source support not
> > > compiled
> > > > in" which I get on other boxes I have not recompiled on yet.
> > > >
> > > > Any ideas?
> > > >
> > > > Chance
> > > >
> > > >
> > > >
> > > >------------------------------------------------------------------------
> > >
> > > >
> > > >_______________________________________________
> > > >syslog-ng maillist - syslog-ng at lists.balabit.hu
> > > > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > > >Frequently asked questions at
> > > http://www.campin.net/syslog-ng/faq.html
> > > >
> > > >
> > > >
> > > when you run the configure did you get in the result?
> > >
> > > checking whether to enable spoof_source support....... yes
> > >
> > > Sometimes it did not find the library where is suppose to be. your
> > > config looks ok. can you confirm on this?
> > >
> > > best regards
> > >
> > > Gerardo Amaya
> > >
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20051011/03313149/attachment-0001.htm