[syslog-ng] spoof_source not working

[Nate Campi]

I'd just compile it on Solaris 8 and copy the binary over to the Solaris
9 box until a fix was found (or never bother).

On Tue, Oct 11, 2005 at 03:27:38PM -0400, Chance Ellis wrote:
> Can someone please point me in a direction on where I could get some help
> with this?
> 
> On 10/6/05, Chance Ellis <chance.ellis at gmail.com> wrote:
> >
> > Has anyone else had problems doing spoof_source on Solaris 9???
> >
> >
> >  On 10/4/05, Chance Ellis <chance.ellis at gmail.com> wrote:
> > >
> > > Here is just a snippet from the configure output:
> > >
> > > checking pthread.h presence... yes
> > > checking for pthread.h... yes
> > > checking for pthread_create in -lpthread... yes
> > > checking whether to enable Sun STREAMS support... yes
> > > checking whether to enable Sun door support... yes
> > > checking whether to enable TCP wrapper support... no
> > > checking whether to enable spoof_source support... yes
> > > checking how to enable static linking for certain libraries... no clues,
> > > linking
> > > everything dynamically, please send appropriate ld arguments to
> > > syslog-ng at lists
> > > .balabit.hu
> > > checking libol version >= 0.3.16... ok
> > > configure: creating ./config.status
> > > config.status: creating Makefile
> > > config.status: creating src/Makefile
> > > config.status: creating src/tests/Makefile
> > > config.status : creating doc/Makefile
> > > config.status : creating doc/sgml/Makefile
> > > config.status: creating contrib/Makefile
> > > config.status: creating syslog-ng.spec
> > > config.status: creating src/config.h
> > > config.status: src/config.h is unchanged
> > > config.status: executing depfiles commands
> > >   Am I still missing something? This work on my Solaris 8 server, but
> > > not on my Solaris 9 box.
> > >  Thanks!
> > >  On 10/4/05, Gerardo Amaya <joseg at galileo.edu > wrote:
> > > >
> > > > Chance Ellis wrote:
> > > >
> > > > > I am running syslog-ng 1.6.8 on Solaris 9. I recompiled with the
> > > > > --enable-spoof-source configure option.
> > > > >
> > > > > Here is my config:
> > > > >
> > > > > destination d_squelch_acl { udp("10.159.234.52<http://10.159.234.52/><http://10.159.234.52
> > > > >"
> > > > > port(514) spoof_source(yes)); };
> > > > > filter f_squelch_acl { match("list squelch denied"); };
> > > > > log { source(net); filter(f_squelch_acl);
> > > > destination(d_squelch_acl);};
> > > > > source net { udp(); };
> > > > >
> > > > >
> > > > > If I start syslog-ng without spoof_source(yes) option, all messages
> > > > > matching are forwarded to the machine in the destination. If I
> > > > change
> > > > > to spoof_source(yes) nothing gets forwarded at all. I do not get any
> > > >
> > > > > errors when I start syslog-ng, like "spoof-source support not
> > > > compiled
> > > > > in" which I get on other boxes I have not recompiled on yet.
> > > > >
> > > > > Any ideas?
> > > > >
> > > > > Chance
> > > > >
> > > > >
> > > > >
> > > > >------------------------------------------------------------------------
> > > >
> > > > >
> > > > >_______________________________________________
> > > > >syslog-ng maillist - syslog-ng at lists.balabit.hu
> > > > > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > > > >Frequently asked questions at
> > > > http://www.campin.net/syslog-ng/faq.html
> > > > >
> > > > >
> > > > >
> > > > when you run the configure did you get in the result?
> > > >
> > > > checking whether to enable spoof_source support....... yes
> > > >
> > > > Sometimes it did not find the library where is suppose to be. your
> > > > config looks ok. can you confirm on this?
> > > >
> > > > best regards
> > > >
> > > > Gerardo Amaya
> > > >
> > >
> > >
> >

> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 


-- 
Nate

"The mind is everything. What you think you become." - Buddha