For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nacho_de_Aguina's avatar
Nacho_de_Aguina
Icon for Nimbostratus rankNimbostratus
May 25, 2013

Client source IP -> SSH VS forward to Syslog

Hello all   I have a big problem with the following scenario and any help will be wonderfull and apreciate   I have a VS serving ssh to a pool of servers, til now everything works fine. The pro...
application delivery
dev
devops
iRules
Nacho_de_Aguina's avatar
Nacho_de_Aguina
Icon for Nimbostratus rankNimbostratus
May 28, 2013
Hello all

 

i have been talking with F5 support team at it seems that F5 assumes port 514 as UDP by itself ?¿?¿ Sure They know more than me

 

I have checked that the irule is being executed and it is

 

 

[nacho@UniF53400:Active] / b rule syslog

 

RULE syslog

 

+-> CLIENT_ACCEPTED 20 total 0 fail 0 abort

 

 

I have enable UDP and TCP 514 in Syslog.

 

I have tested successfully to telnet from F5 514 and it receives entries at syslog

 

 

But when i connect to the endpoint servers to port 22 using VS nothing is being sent to syslog.

 

 

Any idea?

 

 

Thxs a lot

 

 

Nacho