RE: Syslog over Internet

["David Gillett" <gillettdavid () fhda edu>]

  Standard syslog uses UDP to deliver log messages to
the server.  That means that if any of them gets lost
along the way, nobody will know or care.
  So I'm reluctant to try to send standard syslog across
the Internet to a remote server.

  There are a couple of ways to try to fix this.  The
new syslog-sec standard should help, but you're probably
dealing with gear that doesn't yet support it.
  Next best might be to log both locally and remotely, and
FTP the local (remote to you...) logs periodically.

Dave Gillett

> -----Original Message-----
> From: Vineet Mehta [mailto:vineet () linux com kw]
> Sent: August 18, 2003 08:00
> To: security-basics () securityfocus com
> Subject: Syslog over Internet
>
>
> I have hired a server located in a different country. I heard that its
> better to log all your syslog messages on a different 
> machine. As i dont
> have access to any other machine on that network except in my own
> country.
>
> My question is how safe and efficient it is to log Syslogd 
> messages from
> my server in other country to my server in this country?
>
> Is it really safe? is it adviced to do so, of not then why?
>
> Any help would be appreticated
>
> Reegards,
> -- 
> Vineet Mehta
> Network Security Consultant
> Kuwait Linux Company
> Kuwait
> Ph-2412552/2463633
> <vineet [at] linux [dot] com [dot] kw>
> www.linux.com.kw

---------------------------------------------------------------------------
----------------------------------------------------------------------------