Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How can I make rsyslog behave like the default of the old syslog, that it will not be relaying (not forward messages coming from remote hosts to another host)? I.e., that it will only forward locally generated messages?

Edit:

I still want both remote and local messages logged to the local harddisk, like this:

A* --> B --> C

  • Computer B receives logs originating from computers A* and stores them on disk.
  • Computer C receives logs originating from B and stores them on disk. C does not receive logs originating from A*.
  • All computers store their own, local logs on disk as well.
  • I am even considering to add forwarding of logs from C to B.
share|improve this question
    
Have you tried blocking TCP/UDP 601 and TCP/UDP 514? –  Magellan Jan 13 '12 at 18:06
    
@AdrianK I want to receive, but not relay (see edit). –  maxelost Jan 13 '12 at 21:31
    
You might want to look at this post which asked for the opposite rsyslog - relaying only remotely received messages (edit: nxlog will be better). –  b0ti Jan 15 '12 at 20:44
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.