Hi David, thank you for your answer.
a) Yes, I meant the source IP of the outgoing log packet. b) Do I understand it right that there is no way to influence which IP is taken in the case there are two equivalent (in the sense of routing) IP adresses? A kind of explicit binding? Best regards Andreas Mock -----Ursprüngliche Nachricht----- Von: [email protected] [mailto:[email protected]] Im Auftrag von David Lang Gesendet: Dienstag, 18. Februar 2014 08:16 An: rsyslog-users Betreff: Re: [rsyslog] How to config the IP address of outgoing upd/tcp log messages On Mon, 17 Feb 2014, Andreas Mock wrote: > Hi all, > > after hours of debugging a problem (rsyslog 5.8.10) and searching the docs > and google > I'm totally frustrated and want to ask you the following: > > - I want to send log messages out to a remote syslog server => no problem > - But I don't know how to tell the sending side to use a certain IP address. > I have bound two IP addresses to one device and the IP address of the alias > and > NOT the main interface is taken. > - Can someone explain the rules which IP address is taken and how I can > influence it? when you say "which IP address is taken" do you mean the source IP address for the packet? If so, the answer is that unless you set things up otherwise with iptables tricks, the source IP is going to be the IP of the interface picked by the routing table to get to that destination, exactly the same way that the source IP would be selected for SSH, your web browser, or just about every other piece of software on your system. David Lang > Some information: > - 'uname -n' is "test" > - host "test" resolves to main ip > - host "main ip" resolves to "test.full.domain" > - hostname resolves to "test" > - hostname -d resolves to "full.domain" > > > > Best regards > Andreas Mock > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
