I think it would be the right time to create a debug log... Sent from phone, thus brief. Am 08.10.2015 22:29 schrieb "Randy Baca" <[email protected]>:
> Yes, looking at both ends simultaneously. Started a tcpdump on both hosts > and I only see my telnet connections. Restarted rsyslog and waited a > couple minutes and I see no attempts at all. Doesn't even send a SYN. > > ________________________________________ > From: [email protected] [[email protected]] > on behalf of David Lang [[email protected]] > Sent: Thursday, October 08, 2015 1:23 PM > To: rsyslog-users > Subject: Re: [rsyslog] Complex forwarding and spoofing question > > On Thu, 8 Oct 2015, Randy Baca wrote: > > > That rule works better, but I still cannot get rsyslog to forward on port > > 10000. I turned off iptables, I can make a telnet connection to the > remote > > host on 10000, but rsyslog will not even attempt to connect to the > remote host > > on 10000. It works just fine if the omfwd port="514" and protocol="tcp". > > When you say that it doesn't even try on port 10000, are you looking at the > sender or the receiver? Since there may be firewalls between the two, you > would > need to look at the sender. > > David Lang > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

