Re: my linux syslog not working

[Mike Burger]

Silly question, but did you insert a firewall rule for iptables that allows
the router to connect to the syslog port?

jim martin  said:
> Yes,  I tried the following and restart syslogd  it
> does log to the files.  But it doesn't collect my
> router log
>
> *.*		/ 	/var/log/routerlog
>
> --- Brian Fahrlander  wrote:
> > On Tue, 2004-09-21 at 23:13, jim martin wrote:
> > > Hi.. I have configured the syslog on the router to
> >
> > log
> > > to my linux box.
> > >
> > > I configured on my router
> > > logging facility local5
> > > logging 10.1.1.6
> > > logging trap info
> > >
> > > on my linux FC2 box
> > > add a entry in /etc/syslog.conf
> > > local5.*      /var/log/routerlog
> > >
> > > chmod 777 /var/log/routerlog
> > > ps -ef | grep
> > >
> > > [root@linux root]# ps -ef | grep syslog
> > > root     23547     1  0 Sep21 ?        00:00:00
> > > syslogd -m 0 -r
> > > root      3044 29259  0 12:11 pts/3    00:00:00
> >
> > grep
> > > syslog
> > >
> > > [root@linux root]# kill -HUP 23547
> > >
> > > [root@linux root]# netstat -a | grep syslog
> > > udp        0      0 *:syslog                *:*
> > >
> > > There is still no log,  Why ?  Any one can point
> >
> > out
> > > what is the error?  Seems like the router log is
> >
> > not
> > > coming in at all  :(
> > Like in a lot of places, try it with no
> >
> > restrictions, then tighten
> > it to get what you want/need.  This of course is the
> > case if you
> > _haven't_ restarted syslogd ("service syslogd
> > restart").
> > Try something like this first, to prove the
> >
> > concept, then tune it
> > down:
> >
> > *.*		/ 	/var/log/routerlog
> > If you restart it and it starts filling up, then
> >
> > start chosing your
> > keywords.  I don't know any off the top of my head,
> > but they're in the
> > kernel documentation, surely.
> > Just don't forget the restart.
> >
> > --
> > Brian Fahrländer                  Christian,
> > Conservative, and Technomad
> > Evansville, IN                                
> > http://www.fahrlander.net
> > ICQ 5119262
> > AIM: WheelDweller
> >
> > ATTACHMENT part 1.2 application/pgp-signature
>
> name=signature.asc
> > -- 
> > fedora-list mailing list
> > [e-mail]
> > To unsubscribe:
>
> http://www.redhat.com/mailman/listinfo/fedora-list
>
> __________________________________
> Do you Yahoo!?
> New and Improved Yahoo! Mail - Send 10MB messages!
> http://promotions.yahoo.com/new_mail
>
> -- 
> fedora-list mailing list
> [e-mail]
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list