diff --git a/src/etc/syslog.conf b/src/etc/syslog.conf index ccdc37a6..69179f5d 100644 --- a/src/etc/syslog.conf +++ b/src/etc/syslog.conf @@ -1,4 +1,4 @@ -# $OpenBSD: syslog.conf,v 1.4 1997/04/02 11:56:42 kstailey Exp $ +# $OpenBSD: syslog.conf,v 1.5 1997/05/29 20:00:54 deraadt Exp $ # *.err;kern.debug;auth.notice;authpriv.none;mail.crit /dev/console @@ -20,7 +20,11 @@ local0.info /var/log/ipflog *.alert root *.emerg * -# Uncomment to log to a central host named "loghost" +# Uncomment to log to a central host named "loghost". You need to run +# syslogd with the -u option on the remote host if you are using this. +# (This is also required to log info from things like routers and +# ISDN-equipment). If you run -u, you are vulnerable to syslog bombing, +# and should consider using ipf to block external syslog packets #*.notice;auth,authpriv,cron,ftp,kern,lpr,mail,user.none @loghost #kern.debug,user.info,syslog.info @loghost #auth.info,authpriv.debug,daemon.info @loghost