[syslog-ng] Spoofed source bug introduced in 3.3.5

[Marvin Nipper]

And.... you win the kewpie doll, grand prize.  Excellent guess.  I unwound that patch, and the HUP works as it should.

Sorry to throw a monkey wrench into that fix.  When y'all rework it, feel free to throw it my way, and I'll gladly try out the new version (if you need me to verify that it doesn't mangle the spoofing).

THANKS, as always, for the super fast response.  Much appreciated!!

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Gergely Nagy
Sent: Monday, April 30, 2012 10:08 AM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] Spoofed source bug introduced in 3.3.5

On Mon, Apr 30, 2012 at 16:57, Marvin Nipper <Marvin.Nipper at stream.com> wrote:
> So… I’m hoping that someone will say “ah ha”, and have some idea about what
> code might have changed between 3.3.4 and 3.3.5, that might have
> (accidentally) resulted in this behavior.

While not necessarily an ah-ha moment, but can you try reverting this patch:
  http://git.madhouse-project.org/debian/syslog-ng/patch/?id=a898014482f733e9ccac00b7965e92db00d7589b

This is the only patch between 3.3.4 and 3.3.5 that I can imagine
having an effect you describe.

Hopefully my hunch is correct, and then reverting this patch will fix
your issue until we find a better solution.

-- 
|8]
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq



This e-mail may contain confidential and/or privileged information. If you are
not the intended recipient (or have received this e-mail in error) please 
notify the sender immediately and destroy this e-mail. Any unauthorized 
copying, disclosure or distribution of the material in this e-mail is strictly 
forbidden.