Re: syslog and network management

["Brian Loe" <knobdy () gmail com>]

On Feb 20, 2008 12:45 PM, Brian Loe <knobdy () gmail com> wrote:

> I might rephrase that to say, "It is generally thought that the log
> server should be separate from all other services..."

I might also add that part of the reason for this, in my experience,
isn't so much security related but the fact that if the syslog server
is doing anything else you will likely lose a lot of syslog messages.
Especially if you're following some best practices and running your
firewall in debug mode...
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards