[syslog-ng] [Bug 240] New: host() in filters fail to match if using use_dns(yes)

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Fri Jul 12 10:58:46 CEST 2013


https://bugzilla.balabit.com/show_bug.cgi?id=240

           Summary: host() in filters fail to match if using use_dns(yes)
           Product: syslog-ng
           Version: 3.4.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: bmartin at lavabit.com
Type of the Report: bug
   Estimated Hours: 0.0


After upgrading from version 3.2.5 to 3.4.2 a filter using host() did not work anymore. The filter looks something like this:

filter f_filter { host("172.12.0.1") or host("172.12.0.2"); };


Messages which would match this filter never reached their destination as they were used to with 3.2.5. I figured out that $HOST contained only the string
'172'. My assumption is that host() matches against $HOST. In turn I set use_dns(no) and things started working again and now $HOST contains the whole IP
address.



used global options:

options {
        threaded(yes);
        chain_hostnames(no);
        use_dns(no);
        stats_freq(43200);
        mark_freq(3600);
};


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list