[rsyslog-notify] Forum Thread: Re: bind to specific source IP address - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25204#p25204

Message: 
----------
The problem is that if the best/only route to the rsyslog destination is
over one interface, trying to use a source IP that's on another interface
just won't work. You really do need to have it use an IP address on the
right network.

Now, if you have multiple IP addresses on one network, you could run into a
case where rsyslog uses a different one than you would like. I've done some
iptables trickery in the past to deal with this (NAT the connection to the
IP address that you want)

The hostname in the log message should remain the same however it's
delivered, you should work with that rather than the IP address that
delivered the log to you in any case (if you go through a relay, the IP
that delivered the log to you isn't going to be the box that generated the
log anyway.

Rsyslog doesn't set the source IP (with the exception of the UDP forgery
module), it just tells the OS "I want to connect to X" and lets the OS pick
the best path, and corresponding IP address to use.