[syslog-ng] netmask

[Donald Rush]

Thank you for your input.  I am not having an issue with getting the
logs from different devices into different log files.  What is happening
is that in the standard config with the Suse syslog-ng.conf file, it
logs all messages in one file, which I would like to keep, but I would
like to exclude anything from a remote system.  You might be telling me
below, but I don't seem to be getting it.  Below is out of the
syslog-ng.conf, what I would like to do is filter out any remote system
from that.

filter f_messages   { not facility(news, mail) and not
filter(f_iptables); };

#
# All messages except iptables and the facilities news and mail:
#
destination messages { file("/var/log/messages"); };
log { source(src); filter(f_messages); destination(messages); };

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Werner Thal
Sent: Tuesday, August 22, 2006 5:59 AM
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] netmask

Hallo,

I try to use the "netmask" filter option to generate seperate logfiles
for different subnets. 
I tried
	this 		filter krzn_all {
netmask("10.254.0.0/255.255.0.0"); };
	this 		filter krzn_all {
netmask(10.254.0.0/255.255.0.0); };
	this 		filter krzn_all { netmask("10.254.0.0/16"); };
and	this 		filter krzn_all { netmask(10.254.0.0/16); };

No errors have been reported starting syslog-ng but also no messages
have been logged.

I use syslog-ng 2.0rc1-2 on a debian Etch.

Kind Regards
W. Thal

_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html