in reading the spoofing module configuration it strikes me that the defaults can be significantly improved.
the common case for needing to so spoofing is that you are spoofing the original source IP address so the current configuration equivalent commands $template spoofaddr, "%fromhost-ip%" $ActionUDPSpoofSourceNameTemplate spoofaddr could be made the default (or call it RSYSLOG_spoofaddr to keep from polluting the namespace) and the result would be far simpler for people to configure, becomging simply $modload omudpspoof $ActionUDPSpoofTargetHost server.example.com *.* :omudpspoof: it could be simplified even further if there was some way to specify the destination on the action line (like the @ and @@ functions do today, could we use @S@ to indicate spoofing?) changing the defaults should have no problems with backwards compatibility, adding/changing how the desitnation is specified could break backward compatibility, but this is a very new piece of functionality and the simplification may be worth it (what versions have this available?) David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

