Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: RSyslog: users

omudpspoof from local host gets source address 127.0.0.1

 

 

RSyslog users RSS feed   Index | Next | Previous | View Threaded


jrhett at netconsonance

May 7, 2012, 1:39 PM

Post #1 of 2 (199 views)
Permalink
omudpspoof from local host gets source address 127.0.0.1

This actually makes logical sense but I don't think that the effect is desired.

If you by mistake (like me!) set up a udpspoof rule that matches log messages from localhost, the source IP sent on the network will be 127.0.0.1. You can't fix this without hard setting a source address in a template.

This probably falls under "Don't do that!" but it's definitely an odd effect that perhaps should be modified in a future release?

--
Jo Rhett
Net Consonance : net philanthropy to improve open source and internet projects.



_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards


rgerhards at hq

May 8, 2012, 12:07 AM

Post #2 of 2 (177 views)
Permalink
Re: omudpspoof from local host gets source address 127.0.0.1 [In reply to]

New versions provide the abilit to use an interface IP address instead oft he
generic 127.0.0.1. That would solve the problem. However, I don't see how the
issue could be solved rather than by configuration...

Rainer

> -----Original Message-----
> From: rsyslog-bounces [at] lists [mailto:rsyslog-
> bounces [at] lists] On Behalf Of Jo Rhett
> Sent: Monday, May 07, 2012 10:40 PM
> To: rsyslog-users
> Subject: [rsyslog] omudpspoof from local host gets source address 127.0.0.1
>
> This actually makes logical sense but I don't think that the effect is
desired.
>
> If you by mistake (like me!) set up a udpspoof rule that matches log
messages
> from localhost, the source IP sent on the network will be 127.0.0.1. You
can't
> fix this without hard setting a source address in a template.
>
> This probably falls under "Don't do that!" but it's definitely an odd
effect that
> perhaps should be modified in a future release?
>
> --
> Jo Rhett
> Net Consonance : net philanthropy to improve open source and internet
> projects.
>
>
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

RSyslog users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.