17 Jul
2003
17 Jul
'03
04:11
* Anthony Gunia (gunia@calumet.purdue.edu) [030716 19:32]:
I am planning on building a logging server to store web logs for servers via NFS (Unix) and Samba (Windows) in my environment, and to then also act as a syslog server.
Why not do it all over syslog and avoid nfs?
Can anyone provide links or info on securing SuSE for this setup, along with any "words of wisdom" regarding this? Thanks in advance.
You might want to look at syslog-ng. It has had security problems in the past (like plain syslog) but provides much better facilities for a central log server, won't discard log messages, and can use tcp. This entry from their faq might get you started: http://www.campin.net/newlogcheck.html -- -ckm