Rsyslog doesn't do anything specific with the hosts file - it just uses the system resolver library and everything else is handled in there...
I'll have a look at hostname-ip as soon as i can. rainer ----- Ursprüngliche Nachricht ----- Von: "Scott Baker" <[EMAIL PROTECTED]> An: "rsyslog-users" <[email protected]> Gesendet: 24.12.07 21:06 Betreff: Re: [rsyslog] Hostname matching with DNS Rainer Gerhards wrote: > Scott, > > So now a bit more in-depth: the HOSTNAME is taken form the syslog message, > while FROMHOST is the last hope. There is only a difference in relay > scenarios - or, like here, based on DNS resolution. This is why you see > different values. The point is to match against the same one that is used in > the catchall rule. > > However, I think the most appropriate thing to do is add a FROMHOST-IP > property, which always has the IP address of the sender, no matter if the -x > option is given or not. > > Would that help? Ya I think a FROMHOST-IP property would be great. It'd make setting up my rules easier. Tell me more about hosts resolution vs DNS resolution? I have some FROMHOST rules that work just fine, but as soon as I add a hosts entry it stops logging. So somewhere it's using the host entry but I can't figure out how/where or what precedence that has over DNS. -- Scott Baker - Canby Telcom RHCE - System Administrator - 503.266.8253 _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
