syslog listens on udp 514

[robert fowler_1]

Hi anyone know how to stop syslog listening on udp 514 for foreign connections ?

[Slawomir Gora]

Hi,

try add -N option to /etc/rc.config.d/syslogd
and restart syslogd.

[robert fowler_1]

syslogd is only located in the following places, which one is correct ?

/etc/syslogd
/usr/sbin/syslogd
/sbin/init.d/syslogd


a cut and paste from sbin/init.d/syslogd is as follows, should the -N be as highlithed or not

/usr/sbin/syslogd -D -N &&
echo "System message logger started"

[Slawomir Gora]

Hi,
what hpux version do you have ?

in 11.X config file for startup script is always in
/etc/rc.config.d/syslogd

[robert fowler_1]

HP-UX xxxxxx B.11.11 U 9000/800 4177781433 unlimited-user license

[A. Daniel King_1]

Try adding the option in /etc/rc.config.d/syslogd
SYSLOGD_OPTS="-D -N"

[robert fowler_1]

sorry the output from find / -name syslogd is as follows

/etc/syslogd (this is a link to /usr/sbin/syslogd)

/usr/sbin/syslogd
/sbin/init.d/syslogd

which file do i edit

[Biswajit Tripathy]

There should be a /etc/rc.config.d/syslogd file on
HP-UX 11.11 (and also in other 11i) version.

> /etc/syslogd
> /usr/sbin/syslogd

The above files are the syslogd binaries. The one in
/etc is symbolically linked to the one in /usr/sbin

> /sbin/init.d/syslogd

The is the init or RC scrip. There is a symbolic link
from /sbin/rc2.d/S220syslogd to this file.

If you open /sbin/init.d/syslogd file on an editor and
go to line starting with 'start', you can see that the
RC script reads file /etc/rc.config.d/syslogd file. This
file is supposed to have the starting configuration of
syslogd. You system must have this file. If it's not
there, you should create one with the following (only
one) line:

SYSLOGD_OPTS="-D -N"

By default, this file is shipped without the '-N' flag.
This flag asks syslogd not to listen to sockets (any
sockets).

Hope this is clear now.

- Biswajit

[robert fowler_1]

I couldnt see anything in the /sbin/rc2.d/S22osyslogd that referenced the file /etc/rc.config.d/syslogd so I just added the -N to the binarie and that seemed to work,

Strange that it didnt have the correct setup
does anyone see any issue with what I did before I close call ??

Note syslog is still logging to the /var/adm/syslog file and a netstat -na |grep 514 shows nothing listening