Reverse DNS lookup & syslog (Debian 4.0)

Todd LaPittus todd at lapittus.com
Fri Feb 12 09:15:15 CST 2010


For syslog-ng, try this directive:

use_dns(yes|no);

Also, you might consider doing a dist-upgrade to lenny on your etch 
boxes- security support for etch officially ends this Monday:

http://www.debian.org/News/2010/20100121

//Todd
**
Brian O'Mahony wrote:
>
> Im running Debian 4.0 on a number of PowerEdge servers here and I am 
> having some issues with syslog. These machines run various 
> applications. In this case ill take cvs. When a remote machine 
> connects to cvs I get :
>
> Feb 12 14:54:04 buzz runcvs[1533]: connect from 172.16.165.144 
> (172.16.165.144)
>
>  
>
> The machines are all pretty much just basic installs of Debian, with 
> resolve.conf pointed at windows DNS servers.  When I do an nslookup of 
> the IP:
>
>  
>
> buzz:~# nslookup 172.16.165.144
>
> Server:         172.16.164.100
>
> Address:        172.16.164.100#53
>
>  
>
> 144.165.16.172.in-addr.arpa     name = galvin.XXXXX.com.
>
>  
>
> As our domain use DHCP for the windows clients, when I go back a few 
> days later, the syslog entries are close to useless to mea s the IP 
> may have changed. How do I get syslog to log the hostname of the 
> connecting machine?
>
>  
>
> I have tried syslog-ng (albeit I didn't change many parameters) but to 
> the same effect. I still get the IPs of the connecting machine.
>
>  
>
> Any ideas?
>
>  
>
> B
>
> The information in this email is confidential and may be legally privileged.
> It is intended solely for the addressee. Access to this email by anyone else
> is unauthorized. If you are not the intended recipient, any disclosure,
> copying, distribution or any action taken or omitted to be taken in reliance
> on it, is prohibited and may be unlawful. If you are not the intended
> addressee please contact the sender and dispose of this e-mail. Thank you.
>   
> ------------------------------------------------------------------------
>
> _______________________________________________
> Linux-PowerEdge mailing list
> Linux-PowerEdge at dell.com
> https://lists.us.dell.com/mailman/listinfo/linux-poweredge
> Please read the FAQ at http://lists.us.dell.com/faq
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.us.dell.com/pipermail/linux-poweredge/attachments/20100212/51744039/attachment.htm 


More information about the Linux-PowerEdge mailing list