Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I make rsyslog behave like the default of the old syslog, that it will not be relaying (not forward messages coming from remote hosts to another host)? I.e., that it will only forward locally generated messages?


I still want both remote and local messages logged to the local harddisk, like this:

A* --> B --> C

  • Computer B receives logs originating from computers A* and stores them on disk.
  • Computer C receives logs originating from B and stores them on disk. C does not receive logs originating from A*.
  • All computers store their own, local logs on disk as well.
  • I am even considering to add forwarding of logs from C to B.
share|improve this question
Have you tried blocking TCP/UDP 601 and TCP/UDP 514? – Magellan Jan 13 '12 at 18:06
@AdrianK I want to receive, but not relay (see edit). – maxelost Jan 13 '12 at 21:31
You might want to look at this post which asked for the opposite rsyslog - relaying only remotely received messages (edit: nxlog will be better). – b0ti Jan 15 '12 at 20:44

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.