I think it would be very helpful if the documentation about remote logging could say something like ... "syslog messages from m0n0wall have facility=local0"
The current statement "Be sure to set syslogd on the remote server to accept syslog messages from m0n0wall" would be greatly improved by explaining the "local0" nature of the broadcast messages. Without this piece of information it's VERY difficult to guess what the facility is, and therefore difficult to decide what to put into syslog.conf on unix syslog server. Although reading some other posts is it only LOCAL0 that I should be trapping? Are other values used?
thanks, Rod
|