On Wed, Oct 22, 2003 at 01:13:47PM -0500, Erik Anderson wrote:
> Here's my question...I have a linux box on my LAN that is recieving
> all of the syslogs from all of my servers (Linux, NT, & Otherwise).  I
> recently installed a new webserver outside of our LAN, and was
> wondering how best to, if possible, get the logs back to my main
> logging server.

syslog-ng can use TCP instead of UDP and I believe that it also has SSL
encryption available. (Perhaps STARTTLS as well).

> The only scenario that I've come up with so far is to open an ssh
> connection from the logging server to the webserver and use remote
> port forwarding to get the logs back.  Is this possible?  Is there a
> better way?  For some reason, I have in my head that ssh port
> forwarding only works for tcp ports...

Use syslog-ng with ssl, ssh, or stunnel or create an encrypted, tunneled
interface using vtun.

-- 
Chad Walstrom <chewie at wookimus.net>           http://www.wookimus.net/
           assert(expired(knowledge)); /* core dump */
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20031022/81cdcfa9/attachment.pgp