On Tue, 12 Apr 2011, lanas wrote:

On Mon, 11 Apr 2011 11:36:42 +0200,
"Rainer Gerhards" <[email protected]> wrote :

On Sun, 10 Apr 2011, lanas wrote:
 Is it possible to specify a dummy IP for all outgoing rsyslog
packets destined to a remote logging application ?

I do not fully understand your question, but the first sample in the
doc seems to do what I guess you want:

http://www.rsyslog.com/doc/omudpspoof.html

There is a growing number of setups that have to specify a dummy
address for certain services (not only remote sys-logging) as the source
IP of the packet (and not the IP of the interface by which it is sent)
in order to observe some security requieremnts.

I'd be interested in hearing about these security requirements (since they eliminate the possibility for reliable delivery)

The omudpspoof configuration seems to be doing that: I will try it.  Is
the $ActionUDPSpoofTargetHost a mandatory parameter to have this
working ?  I'd have thought that setting the source IP of the packet
would be independent of any target.

the source is independent of the target, but there is no other way to specify the target. If you look at the examples on the page, you will see that you don't specify the destination on the action line.

David Lang

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to