Syslog Server Setup

[charlie205]

I want to setup my Ubuntu 8.04 box as a syslog server. First I need it to listen for "remote" syslogs. I edited /etc/init.d/sysklogd to accomplish this purpose. I changed

SYSLOGD=""
to
SYSLOGD="-r -m0"

Then I did a netstat -tulp but I don't see anything on 514. In fact, I don't see anything different from earlier at all. What gives?

By editing the file /etc/syslog.conf I was able to change the location of my local system's logs, but I want this system to listen for remote logs.

Any ideas?

[wildpossum]

Have you tried "telenet localhost 514" to see if you systems port service responds (it may be running and your missed it with netstat) ?

[charlie205]

It looks like it's not running

telnet localhost 514

Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection refused

I restarted the service also. I forgot to mention that earlier.

[charlie205]

Can anyone offer any help???

Everything I read online says this process should be a snap. I don't get what I'm missing.

[charlie205]

I'm not going to give up on this thread. Somebody throw me a bone...at least give me a hint!

[charlie205]

hmmm... I guess I am going to give up on this thread, since nobody is replying...

[Ben Cotton]

It looks like your firewall doesn't allow connections to that port. Can you post the output of

sudo iptables -L

[charlie205]

sudo iptables -L

outputs:

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination