From eugen@www.svzserv.kemerovo.su  Wed May 14 05:27:41 2003
Return-Path: <eugen@www.svzserv.kemerovo.su>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D960A37B401; Wed, 14 May 2003 05:27:40 -0700 (PDT)
Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su [213.184.65.80])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 9F0E143F3F; Wed, 14 May 2003 05:27:39 -0700 (PDT)
	(envelope-from eugen@www.svzserv.kemerovo.su)
Received: from www.svzserv.kemerovo.su (eugen@localhost [127.0.0.1])
	by www.svzserv.kemerovo.su (8.12.9/8.12.9) with ESMTP id h4ECRaYt012251;
	Wed, 14 May 2003 20:27:36 +0800 (KRAST)
	(envelope-from eugen@www.svzserv.kemerovo.su)
Received: (from eugen@localhost)
	by www.svzserv.kemerovo.su (8.12.9/8.12.9/Submit) id h4ECRZYm012249;
	Wed, 14 May 2003 20:27:36 +0800 (KRAST)
Message-Id: <200305141227.h4ECRZYm012249@www.svzserv.kemerovo.su>
Date: Wed, 14 May 2003 20:27:36 +0800 (KRAST)
From: Eugene Grosbein <eugen@www.svzserv.kemerovo.su>
Reply-To: Eugene Grosbein <eugen@www.svzserv.kemerovo.su>
To: FreeBSD-gnats-submit@freebsd.org
Cc: gshapiro@freebsd.org
Subject: Revision 1.59.2.24 of syslogd stopped to write logs from remote hosts
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         52223
>Category:       bin
>Synopsis:       Revision 1.59.2.24 of syslogd stopped to write logs from remote hosts
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    gshapiro
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed May 14 05:30:21 PDT 2003
>Closed-Date:    Mon May 19 09:23:41 PDT 2003
>Last-Modified:  Mon May 19 09:23:41 PDT 2003
>Originator:     Eugene Grosbein
>Release:        FreeBSD 4.8-STABLE i386
>Organization:
Svyaz-Service JSC
>Environment:
System: FreeBSD www.svzserv.kemerovo.su 4.8-STABLE FreeBSD 4.8-STABLE #0: Tue May 13 16:38:51 KRAST 2003 eu@www.svzserv.kemerovo.su:/home4/obj/home/src/sys/WWW i386

>Description:
		Yesterday I've updated my 4.8-RC system (30 May 2003)
		to 4.8-STABLE. Now syslogd does not write logs from
		remote hosts. Locally generated logs are written OK.

		I've checked out syslogd's sources from 4.7-RELEASE
		and it started to work again. Then I've found there
		was only one commit to syslogd.c during the period
		since 30 May till now, that's 1.59.2.24.
		It deals with remoted hosts somehow.

>How-To-Repeat:

		Here is my /etc/syslog.conf

# $FreeBSD: src/etc/syslog.conf,v 1.13.2.4 2003/05/12 13:59:23 yar Exp $
#
#	Spaces ARE valid field separators in this file. However,
#	other *nix-like systems still insist on using tabs as field
#	separators. If you are sharing this file between systems, you
#	may want to use only tabs as field separators here.
#	Consult the syslog.conf(5) manpage.

# Local logs
+@
*.err;kern.*;security.info;auth.error;mail.crit	/dev/console
*.notice;kern.*;lpr.info;mail.crit;news.err	/var/log/messages
security.info					/var/log/security
kern.*						/var/log/kernel.log
mail.info					/var/log/maillog
lpr.info					/var/log/lpd-errs
cron.*						/var/log/cron
ftp.info					/var/log/ftpd.log
ftp.debug					/var/log/ftpdebug.log
auth.*;authpriv.*				/var/log/auth.log
auth.=info					|exec /usr/local/adm/syslog/auth.info
local5.*					|exec /usr/local/adm/syslog/local5
*.err						root
*.notice;news.err				root
*.alert						root
*.emerg						*
local0.*					/var/log/local0.log
#local2.*					|exec /usr/local/adm/mrtg/dk-kmk/log2file
local1.*					/var/log/local1.log
local1.err					/dev/console
local3.*					/var/log/local3.log
local4.*					/usr/local/apache/stat/data/admin/rwrlog/riptrace
#portsentry
local5.*					/var/log/local5.log
# uncomment this to log all writes to /dev/console to /var/log/console.log
console.*					/var/log/console.log
# uncomment this to enable logging of all log messages to /var/log/all.log
# touch /var/log/all.log and chmod it to mode 600 before it will work
#*.*						/var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
#*.*						@loghost
# uncomment these if you're running inn
# news.crit					/var/log/news/news.crit
# news.err					/var/log/news/news.err
# news.notice					/var/log/news/news.notice
!startslip
*.*						/var/log/slip.log
!ppp
*.*						/var/log/ppp.log
!pppd
*.*						/var/log/pppd.log
!simple_httpd
daemon.*					/var/log/shd.log
#*.*						/dev/ttyv9

#
# Log from other hosts
#
!*

+gw2.svzserv.kemerovo.su
user.notice					/usr/local/apache/stat/data/admin/rwrlog/reg/syslog
local3.info					/usr/local/apache/stat/data/admin/rwrlog/gpz2/riptrace/riptrace
+mail.svzserv.kemerovo.su
mail.*						/var/log/mail/maillog
local0.*					/var/log/mail/local0
local6.*					/var/log/mail/cyrus.log

+hq.svzserv.kemerovo.su
local6.*					/var/log/mail/mysql_auth.log

+news.svzserv.kemerovo.su
local6.*					/var/log/mail/mysql_auth.log


		Last 7 files are not appended with fresh syslogd from STABLE.
>Fix:

	Unknown for me.
	As workaround, I rolled 1.59.2.24 back. Now syslogd works as before.
>Release-Note:
>Audit-Trail:

From: Peter Pentchev <roam@ringlet.net>
To: Eugene Grosbein <eugen@www.svzserv.kemerovo.su>
Cc: bug-followup@FreeBSD.org, gshapiro@FreeBSD.org
Subject: Re: bin/52223: Revision 1.59.2.24 of syslogd stopped to write logs from remote hosts
Date: Wed, 14 May 2003 16:11:55 +0300

 On Wed, May 14, 2003 at 08:27:36PM +0800, Eugene Grosbein wrote:
 > 
 > >Number:         52223
 > >Category:       bin
 > >Synopsis:       Revision 1.59.2.24 of syslogd stopped to write logs from remote hosts
 > >Originator:     Eugene Grosbein
 > >Description:
 > 		Yesterday I've updated my 4.8-RC system (30 May 2003)
 > 		to 4.8-STABLE. Now syslogd does not write logs from
 > 		remote hosts. Locally generated logs are written OK.
 > 
 > 		I've checked out syslogd's sources from 4.7-RELEASE
 > 		and it started to work again. Then I've found there
 > 		was only one commit to syslogd.c during the period
 > 		since 30 May till now, that's 1.59.2.24.
 > 		It deals with remoted hosts somehow.
 > 
 > >How-To-Repeat:
 > 
 > 		Here is my /etc/syslog.conf
 [snip]
 > #
 > # Log from other hosts
 > #
 > !*
 > 
 > +gw2.svzserv.kemerovo.su
 > +hq.svzserv.kemerovo.su
 > +news.svzserv.kemerovo.su
 
 Could you try changing those hostnames to *only* the hostname, without
 the domain name that syslogd recognizes as 'LocalDomain'?  It seems that
 syslogd strips the local domain before matching the hostname the log
 line was received from against any of the hostnames defined in
 syslog.conf.
 
 G'luck,
 Peter
 
 -- 
 Peter Pentchev	roam@ringlet.net    roam@sbnd.net    roam@FreeBSD.org
 PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
 Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
 This sentence claims to be an Epimenides paradox, but it is lying.

From: Gregory Neil Shapiro <gshapiro@FreeBSD.org>
To: Peter Pentchev <roam@ringlet.net>
Cc: Eugene Grosbein <eugen@www.svzserv.kemerovo.su>,
	bug-followup@FreeBSD.org
Subject: Re: bin/52223: Revision 1.59.2.24 of syslogd stopped to write logs from remote hosts
Date: Wed, 14 May 2003 09:34:31 -0700

 > Could you try changing those hostnames to *only* the hostname, without
 > the domain name that syslogd recognizes as 'LocalDomain'?  It seems that
 > syslogd strips the local domain before matching the hostname the log
 > line was received from against any of the hostnames defined in
 > syslog.conf.
 
 But it should do the same stripping for reading the syslog.conf file.
 That was the bug before.
 
 Eugene, can you mail me the output of the 'hostname' command as
 well as the output of a debug session of syslogd using the -d flag
 in addition to the ones you normally use.  Be sure a remote machine
 tries to log during this time.
Responsible-Changed-From-To: freebsd-bugs->gshapiro 
Responsible-Changed-By: gshapiro 
Responsible-Changed-When: Wed May 14 09:46:15 PDT 2003 
Responsible-Changed-Why:  
I am responsible for the change that broke the submitter's setup. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=52223 
State-Changed-From-To: open->patched 
State-Changed-By: gshapiro 
State-Changed-When: Sat May 17 13:10:20 PDT 2003 
State-Changed-Why:  
A fix has been committed to the HEAD and will be MFC'ed to RELENG_4 soon. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=52223 

From: Eugene Grosbein <eugen@kuzbass.ru>
To: Gregory Neil Shapiro <gshapiro@FreeBSD.org>
Cc: bug-followup@FreeBSD.org
Subject: Re: bin/52223: Revision 1.59.2.24 of syslogd stopped to write logs from 
 remote hosts
Date: Mon, 19 May 2003 11:33:57 +0800

 I merged r. 1.115 and it works.
 
 Eugene Grosbein
State-Changed-From-To: patched->closed 
State-Changed-By: gshapiro 
State-Changed-When: Mon May 19 09:23:24 PDT 2003 
State-Changed-Why:  
The fix has been MFC'ed to RELENG_4 

http://www.freebsd.org/cgi/query-pr.cgi?pr=52223 
>Unformatted:
