Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) [Fwd: P75: Syslog brings up connection - Need filter help]

On Thu, May 14, 1998 at 10:08:31AM -0700, Kevin Smith wrote:

> I have a Pipeline 75 that's configured to drop the connection after an
> idle period. I've just set it up to send syslog messages to a machine on
> my LAN. However, when the P75 sends the syslog message indicating that
> it's hanging up, the connection gets re-made. I need some info on
> creating a filter that will prevent this.
> 
> Dennis

You don't want a filter. You want to investigate why syslog is causing
a dialout, and eliminate this cause.

Guess 1)

 The most typical problem is a typo in the syslog configuration on the
 Pipe which gives an IP address that is actually on the WAN side not
 the LAN side. This will, of course, generate dialout attempts ad
 infinitum.

Guess 2)

 If you have made sure it is not the no-brainer 1) then I'd bet it is
 DNS. The syslog daemon always tries to reverse resolve the IP of the
 client which sends messages to it. Thus if the Pipe sends a syslog
 message, the syslog will try to reverse resolve the Pipes IP, and if
 your DNS directs the question to the WAN, up the connection goes.
 You need to reverse resolve the IPs on your local DNS, or at least
 prepare it to resolve the relevant address space so it won't forward
 the question but can answer with either a PTR or "there is no name".
 May even be that adding the Pipe to /etc/hosts is sufficient, but
 believe me - it is always better to use DNS especially if you use
 internal IPs. It's not only syslog which tries to resolve the IPs,
 others do this as well ;)

-- 

Kanther-Line: PGP SSH IDEA MD5 GOST RIPE-MD160 3DES RSA FEAL32 RC4

+-o-+--------------------------------------------------------+-o-+
| o |               \\\- Brain Inside -///                   | o |
| o |                   ^^^^^^^^^^^^^^                       | o |
| o | Andre' Beck  (ABPSoft)   AB10-RIPE   Xlink PoP Dresden | o |
+-o-+--------------------------------------------------------+-o-+
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: