[syslog-ng] syslog conf (off topic)

[Mike Siedelberg]

Hello, this is a bit off topic but I can't find a good syslog list anymore.  This has to do with the old original syslog, sorry :-).  I like syslog-ng and use it, but we also have AIX hosts to deal with.

One of our applications programmers supposedly found this remote syslog config on a site on how to comply with basic security.  I can't seem to convince folks here about why this is wrong.  When this config is modeled we do get events.  Please comment on the correctnes of the syslog.conf lines below. As you can see, all the remote lines point to the same syslog collector.  Many thanks.

If there is a more appropriate list to go to, please advise, thanks.

auth.info       @arcsl1
local7.info     @arcsl1
local6.info     @arcsl1
auth.*          @arcsl1
authpriv.*      @arcsl1
local7.*        @arcsl1