in reading the spoofing module configuration it strikes me that the 
defaults can be significantly improved.

the common case for needing to so spoofing is that you are spoofing the 
original source IP address

so the current configuration equivalent commands

$template spoofaddr, "%fromhost-ip%"
$ActionUDPSpoofSourceNameTemplate spoofaddr

could be made the default (or call it RSYSLOG_spoofaddr to keep from 
polluting the namespace) and the result would be far simpler for people to 
configure, becomging simply

$modload omudpspoof
$ActionUDPSpoofTargetHost server.example.com
*.* :omudpspoof:

it could be simplified even further if there was some way to specify the 
destination on the action line (like the @ and @@  functions do today, 
could we use @S@ to indicate spoofing?)


changing the defaults should have no problems with backwards 
compatibility, adding/changing how the desitnation is specified could 
break backward compatibility, but this is a very new piece of 
functionality and the simplification may be worth it (what versions have 
this available?)

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to