The problem was having the TCP also checked. Once that was unchecked, I set services to log server, shut off Imail syslog service, stopped and started SMTP and Queue Man., and closed and reopened Kiwi.
However my Anti-Spam Log is not showing up, usually spamxxxx.txt. Nothing in error log. Anyone know the resolution to that? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] "Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems" -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 2:50 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Thanks for all your help everyone. I will let you know what the results are. Thanks, Chris Patterson, CCNA Network Engineer -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 2:31 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Ok, that clearly shows that some application or service is listening for inbound syslog. Download fport from http://www.foundstone.com and it will show the name and path of that executable. From there, you'll solve it. Let us know how that works out for you. Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 11:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Actually, The netstat -an showed this: UDP 0.0.0.0:514 *:* Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems (813)232-4887 Ext. 112 [EMAIL PROTECTED] "Managed Spam Filtering and Anti-Virus Protection for Your Internet Service - Available Today from Rapid Systems" -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, February 17, 2005 1:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Several people on the IMail forum have mentioned to you to try netstat -an to see what may be listening on 514. Have you done that yet? Darin. ----- Original Message ----- From: "Chris Patterson" <[EMAIL PROTECTED]> To: <Declude.JunkMail@declude.com> Sent: Thursday, February 17, 2005 1:41 PM Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup The Syslogd is definetly stopped. No software firewall, we use SonicWall. Thanks, Chris Patterson, CCNA Network Engineer -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 17, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup Chris, Declude is not the culprit. Your IMail installation likely has syslog turned on. Check your IMail Administrator under localhost, Services, and see if Syslogd is running. Barring that, do you have a personal firewall installed that may need you to approve Kiwi to use network services? Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 7:09 AM To: Declude.JunkMail@declude.com Cc: IMail_Forum@list.ipswitch.com Subject: [Declude.JunkMail] FW: [IMail Forum] Issue with Log Server Setup I am having issues setting up a Log Server(Kiwi) and am receiving the error "2005-02-17 09:18:39 Unable to open UDP socket on port 514. I have shut down IMAIL's services, I believe the declude logging may be causing this error. Has someone else gone down this road that has some suggestions? I like where Declude is presently logging and need to stop the IMAIL logging to my spool directory. Chris -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Patterson Sent: Thursday, February 17, 2005 9:38 AM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Issue with Log Server Setup It is on UDP 514, and with IMAIL Syslog service shutdown it is still not working. I am using the Freeware Kiwi Syslog Daemon Ver 7.1.4. Any other suggestions? Thanks, Chris Patterson, CCNA Network Engineer Rapid Systems -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, February 16, 2005 6:25 PM To: IMail_Forum@list.ipswitch.com Subject: Re: [IMail Forum] Issue with Log Server Setup Did you shut down the IMail syslog service (port conflict)? At 02:24 PM 2/16/2005, you wrote: >I am having trouble setting up Kiwi Log Server on the mail server. > >I have installed it and set SMTP to log to Log Server, but Kiwi isn't >hearing a thing. > >It is defaulted to listen to TCP 1468, I can not find anything in >archives or KB about this. Is there something very obvious I am >missing? > >Thanks, > >Chris Patterson, CCNA >Network Engineer >Rapid Systems > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax: (209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
