Listening syslog in two nics (eth0-eth1) in the same server

[juanmafer]

Hi!
I have two NICs with a different IP.
I need to listening the 514 port for both adapters and only listening the eth0.
It's posible?

My filter input is:
syslog {
type => 'syslog'
port => 514
host => '0.0.0.0'
}

Thks!

[mcapra]

That should work, but if it doesn't you could configure two separate syslog inputs for each address:

Code: Select all

syslog {
type => 'syslog'
port => 514
host => '192.168.67.1'
}
syslog {
type => 'syslog'
port => 514
host => '192.168.67.2'
}

There's also additional considerations when listening on privileged ports like 514. I would suggest reviewing this document:
https://assets.nagios.com/downloads/nag ... Server.pdf

[juanmafer]

Thaks for the quickly answer.
I made the modifications but the problem continue.
Another idea?

[mcapra]

You haven't described what the problem is yet. Could you tell me exactly what's going on?

[juanmafer]

I fixed the issue!!!!
We solved it by disabling the Reverse Path Forwarding in the file /etc/sysctl.conf, this was done setting to zero (0) the line
# Controls source route verification
net.ipv4.conf.default.rp_filter = 0

[dwhitfield]

It sounds like this issue has been resolved. Is it okay if we lock this thread? Thanks for choosing the Nagios forums!