the thing you do not seem to understand is that you have not been able to show
us any log from the source that you are wanting to block.
This may be because the machine has multiple IP addresses and it's arriving from
a different IP, it may be because you are relaying the message, so fromhost-ip
has the relay IP
but from what you have shown, nothing is arriving at the rsyslog machine from
the IP you are wanting to block.
We are trying to help figure out what is happening with the logs, but we don't
know your network, so we are trying to help you see what's happening so that you
can tell us.
I'm sorry that you feel that the troubleshooting is too much bother, but any
other syslog daemon is going to have the same problem. If you block by source
IP, but messages aren't arriving from that source IP, they won't be blocked.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
