You probably have an *.info somewhere else in /etc/syslog.conf that points to /var/log/messages. For the second question, don't you have a firewall? You can also put a "personal" firewall like IPfilter or the like on your logging machine that could limit what IP addresses that you would allow to send you packets. Ron Ogle Rennes, France > -----Original Message----- > From: skop ganu [mailto:skopat_private] > Sent: Tuesday, November 27, 2001 2:51 AM > To: loganalysisat_private > Subject: [logs] syslogd - parallel logging > > > hi all, > thanks for all the reply :) > sorry for not trying it earlier > > anyway still have some problem as this ; on the server when i > specify in /etc/syslog.conf ; local3.info @client-one-file > , still the messages goes parallel to /var/log/messages and > /var/log/client-one-file. > > anyway is there any 'security precaution' should syslogd be ? > with my experiment anyone could easily point their machine to > my log server (in /etc/syslog.conf ; local3.info > @192.168.0.1) so my server would received it and > /var/log/messages would be fill with it. > > > > -skop > > > > > ______________________________________________________________ > _____________ > Visit http://www.visto.com. > Find out how companies are linking mobile users to the > enterprise with Visto. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: loganalysis-unsubscribeat_private > For additional commands, e-mail: loganalysis-helpat_private > --------------------------------------------------------------------- To unsubscribe, e-mail: loganalysis-unsubscribeat_private For additional commands, e-mail: loganalysis-helpat_private
This archive was generated by hypermail 2b30 : Tue Nov 27 2001 - 04:44:31 PST