System logs can't send to the Remote syslog servers

dr85

My English is poor.

pfSense 2.0-BETA4 (i386) built on Fri Oct 8 02:16:27 EDT 2010
I has set "Enable syslog'ing to remote syslog servers" and the remote syslog server IP
when the pfSense computer starting, the Remote syslog servers can receive


Oct  9 10:28:44 kernel: wpi: If you agree with the license, set legal.intel_wpi.license_ack=1 in /boot/loader.conf.
Oct  9 10:28:46 last message repeated 2 times
Oct  9 10:28:46 check_reload_status: Linkup starting em1
Oct  9 10:28:46 check_reload_status: Linkup starting em1
Oct  9 10:28:46 kernel: em1: link state changed to UP
Oct  9 10:28:46 kernel: em1: link state changed to UP
Oct  9 10:28:47 pf: 00:00:00.225970 rule 44/0(match): block in on em2: (tos 0x0, ttl 52, id 1413, offset 0, flags [DF], proto TCP (6), length 40)
Oct  9 10:28:47 pf: 00:00:00.225970 rule 44/0(match): block in on em2: (tos 0x0, ttl 52, id 1413, offset 0, flags [DF], proto TCP (6), length 40)
Oct  9 10:28:47 pf:     192.168.0.183.1926 > 219.133.62.3.443: Flags [s], cksum 0x90ab (correct), seq 1466134092, win 64380, options [mss 1460,nop,wscale 0,nop,nop,TS val 0 ecr 0,nop,nop,sackOK], length 0
Oct  9 10:28:47 kernel: done.
Oct  9 10:28:47 kernel: Configuring CRON...
Oct  9 10:28:47 kernel: done.
Oct  9 10:28:47 php: : ROUTING: add default route to 172.17.1.163
Oct  9 10:28:48 kernel: Starting OpenNTP time client...
Oct  9 10:28:48 kernel: done.
Oct  9 10:28:48 pf: 00:00:00.100336 rule 44/0(match): block in on em2: (tos 0x0, ttl 52, id 57307, offset 0, flags [DF], proto TCP (6), length 40)
Oct  9 10:28:48 pf: 00:00:00.100336 rule 44/0(match): block in on em2: (tos 0x0, ttl 52, id 57307, offset 0, flags [DF], proto TCP (6), length 40)
Oct  9 10:28:48 pf:     192.168.1.109.2066 > 61.156.40.186.80: Flags [s], cksum 0xdaf8 (correct), seq 213412513, win 65535, options [mss 1460,nop,nop,sackOK], length 0
Oct  9 10:28:48 pf:     192.168.1.109.2066 > 61.156.40.186.80: Flags [s], cksum 0xdaf8 (correct), seq 213412513, win 65535, options [mss 1460,nop,nop,sackOK], length 0
Oct  9 10:28:50 dhcpd: Internet Systems Consortium DHCP Server V3.0.7
Oct  9 10:28:50 dhcpd: Copyright 2004-2008 Internet Systems Consortium.
Oct  9 10:28:50 dhcpd: All rights reserved.
Oct  9 10:28:50 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
Oct  9 10:28:50 dhcpd: Internet Systems Consortium DHCP Server V3.0.7
Oct  9 10:28:50 dhcpd: Copyright 2004-2008 Internet Systems Consortium.
Oct  9 10:28:50 dhcpd: All rights reserved.
Oct  9 10:28:50 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
Oct  9 10:28:50 dhcpd: Wrote 0 deleted host decls to leases file.
Oct  9 10:28:50 dhcpd: Wrote 0 new dynamic host decls to leases file.
Oct  9 10:28:50 dhcpd: Wrote 0 leases to leases file.
Oct  9 10:28:50 dhcpd: Listening on BPF/em0/00:1b:21:17:2e:69/192.168.0/23
Oct  9 10:28:50 dhcpd: Sending on   BPF/em0/00:1b:21:17:2e:69/192.168.0/23
Oct  9 10:28:50 dhcpd: Sending on   Socket/fallback/fallback-net
Oct  9 10:28:50 dnsmasq[34365]: started, version 2.55 cachesize 10000
Oct  9 10:28:50 dnsmasq[34365]: compile time options: no-IPv6 GNU-getopt no-DBus I18N DHCP TFTP
Oct  9 10:28:50 dnsmasq[34365]: reading /etc/resolv.conf
Oct  9 10:28:50 dnsmasq[34365]: using nameserver 172.16.0.2#53
Oct  9 10:28:50 dnsmasq[34365]: using nameserver 172.16.0.1#53
Oct  9 10:28:50 dnsmasq[34365]: read /etc/hosts - 9 addresses
Oct  9 10:28:50 dhcpd: DHCPINFORM from 192.168.0.148 via em0
Oct  9 10:28:50 dhcpd: DHCPACK to 192.168.0.148 (00:2f:82:9e:8f:6e) via em0
Oct 9 10:28:52 squid[24821]: Squid Parent: child process 25409 started

after this the Remote syslog servers can't receive another message.

![diag_logs_settings.png](/public/_imported_attachments_/1/diag_logs_settings.png)
![diag_logs_settings.png_thumb](/public/_imported_attachments_/1/diag_logs_settings.png_thumb)
![pkg_mgr_installed.png](/public/_imported_attachments_/1/pkg_mgr_installed.png)
![pkg_mgr_installed.png_thumb](/public/_imported_attachments_/1/pkg_mgr_installed.png_thumb)[/s][/s][/s]