[prev in list] [next in list] [prev in thread] [next in thread] 

List:       syslog-ng
Subject:    Re: [syslog-ng] Spoofed source bug introduced in 3.3.5
From:       Marvin Nipper <Marvin.Nipper () stream ! com>
Date:       2012-04-30 18:37:12
Message-ID: AE8FF32FA72E2C41B2CFA317199C2B4808CB848324 () mailrsn02 ! Americas ! Stream ! Corp
[Download RAW message or body]

And.... you win the kewpie doll, grand prize.  Excellent guess.  I unwound that \
patch, and the HUP works as it should.

Sorry to throw a monkey wrench into that fix.  When y'all rework it, feel free to \
throw it my way, and I'll gladly try out the new version (if you need me to verify \
that it doesn't mangle the spoofing).

THANKS, as always, for the super fast response.  Much appreciated!!

-----Original Message-----
From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] \
                On Behalf Of Gergely Nagy
Sent: Monday, April 30, 2012 10:08 AM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] Spoofed source bug introduced in 3.3.5

On Mon, Apr 30, 2012 at 16:57, Marvin Nipper <Marvin.Nipper@stream.com> wrote:
> So… I'm hoping that someone will say "ah ha", and have some idea about what
> code might have changed between 3.3.4 and 3.3.5, that might have
> (accidentally) resulted in this behavior.

While not necessarily an ah-ha moment, but can you try reverting this patch:
  http://git.madhouse-project.org/debian/syslog-ng/patch/?id=a898014482f733e9ccac00b7965e92db00d7589b


This is the only patch between 3.3.4 and 3.3.5 that I can imagine
having an effect you describe.

Hopefully my hunch is correct, and then reverting this patch will fix
your issue until we find a better solution.

-- 
> 8]
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq



This e-mail may contain confidential and/or privileged information. If you are
not the intended recipient (or have received this e-mail in error) please 
notify the sender immediately and destroy this e-mail. Any unauthorized 
copying, disclosure or distribution of the material in this e-mail is strictly 
forbidden.

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq


[prev in list] [next in list] [prev in thread] [next in thread]