=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/etc/syslog.conf,v retrieving revision 1.4 retrieving revision 1.5 diff -u -r1.4 -r1.5 --- src/etc/syslog.conf 1997/04/02 11:56:42 1.4 +++ src/etc/syslog.conf 1997/05/29 20:00:54 1.5 @@ -1,4 +1,4 @@ -# $OpenBSD: syslog.conf,v 1.4 1997/04/02 11:56:42 kstailey Exp $ +# $OpenBSD: syslog.conf,v 1.5 1997/05/29 20:00:54 deraadt Exp $ # *.err;kern.debug;auth.notice;authpriv.none;mail.crit /dev/console @@ -20,7 +20,11 @@ *.alert root *.emerg * -# Uncomment to log to a central host named "loghost" +# Uncomment to log to a central host named "loghost". You need to run +# syslogd with the -u option on the remote host if you are using this. +# (This is also required to log info from things like routers and +# ISDN-equipment). If you run -u, you are vulnerable to syslog bombing, +# and should consider using ipf to block external syslog packets #*.notice;auth,authpriv,cron,ftp,kern,lpr,mail,user.none @loghost #kern.debug,user.info,syslog.info @loghost #auth.info,authpriv.debug,daemon.info @loghost