rsyslog to send ip address rather than hostname - linux

I already setup centralized logging system on my environment but i keep getting hostname from the client rather than ip address
is there a way to receive or send ip instead of hostname?
thanks

You would need to define a template on both your remote and central server which uses fromhost-ip instead of fromhost or hostname. This way you will transmit the message with the IP in the message and you will save that information on your central server.
I don't know of any standard templates that use IP address over hostname, as normally a hostname is of more use than an IP address
More info on properties can be found here and templates here

Related

send fake ip address for defined ip for security

I need to send a fake IP address to a defined server (ip) due to the need for security and distrust in that server. Unfortunately, I have to use this server, but I do not want fake IP to be sent to all servers where I connect. I need it for windows operating system.
Does anyone know how to do this?

Acumatica sending mail server IP for Self Hosted In-House Exchange

In order for us to allow the Acumatica system to relay our domain and send emails from the Acumatica system I need to open our firewall for the Acumatica sending mail servers. Does anyone happen to know the IP address or IP range of the Acumatica sending mail servers? We host our exchange in-house which is why it is needed.
You need to lookup the servers you are using on page System Email Accounts SM204002:
Usually it's trickier to identify the ports than the IP. For IP you can resolve the host name of the server. Ex: hostname is outlook.office365.com in image above, it resolves to:
The ports will very likely be the same as any other public SMTP server. You know which port to target based on SMTP server type (incoming/outgoing/relay), authentication support (SSL/TLS). For reference from this link:
We were able to figure it out by pinging our Acumatica site. With that IP we were able to put a secure path through our firewall so that it can talk to our internal exchange server. Hopefully, the IP will not change and this setting will continue to work.
For those who need the IP of there Acumatica site ping your site (ex. name.acumatica.com) this IP is the relying IP that Acumatica uses for your account to send mail through there system.
IP Addresses can tend to change. I believe what you are referring to is you are opening firewalls based on specific ip addresses. The challenge there is the Acumatica IP address could change one day and without any notice your email will stop working.
I recommend using an SMTP Server that is open, but requires authentication (logging in) in order to relay emails.

How to use iis with friendly name on local network

I make a web site to my local. I set bindings local.com and www.local.com. I add hosts xml to
127.0.0.1 local.com
127.0.0.1 www.local.com
So, I can connet on my pc like
local.com,
www.local.com,
192.168.1.35
But another pc on my network can't conenct with friendly name
www.local.com,
local.com,
But same pc can connet with ip
192.168.1.35
How can that another pc connect with friendly name ?
IP Addresses are the numerical identification for each device on a computer network.
Named Addresses invented, because remembering each device Address's turned to a difficult job.
So someone must know's which names must be converted to which IP Address.
DNS Servers are responsible to do this translation. But you done that locally. Actually you don't have a DNS Server on your local System, So you can't tell to others that "WWW.Something.COM" is my Address.
If you didn't connected to the internet, you must establish a DNS Server or done this task manually in all clients:
https://helpdeskgeek.com/networking/edit-hosts-file/
Running a DNS Server is another task. you can search for DNS Server applications like https://simpledns.com/ or you can setup a DNS Server using Windows Server. for both scenarios you need to tell to your clients to add your DNS Server Address to their network Adapter settings.
or If you are connected to the Internet, you can Use a NoIP to register a free Address:
https://www.noip.com/
you then need to download an application (In Noip.com) to monitor IP changes, it will monitors your IP address and it changes and then tells to NOIP.com to translate your address into your current IP address.
Actually NOIP will registers your address globally around the Internet network and each one who can access to the internet is able to reach to your address.

Splunk showing gateway timeout

We're running Splunk in our environment. We can only access the Splunk instance via the IP address, but not the DNS address we have mapped to it.
For instance, we can go to this URL using the IP:
http://10.40.50.17:8000/en-US/app/launcher/home
Splunk is working fine. However if I go to:
http://splunk.mycompany.com:8000/en-US/app/launcher/home
I get a gateway timeout error:
Gateway Timeout
Server error - server 10.40.50.17 is unreachable at this moment.
Please retry the request or contact your adminstrator.
I'm wondering where the issue may lie. Is this a problem with Splunk? Do I need to make Splunk aware of the DNS address that I'm giving it?
I would check two places:
Your Windows DNS server, maybe there may be an issue there. Can you access other servers via DNS that are listed there? It could be an issue with the client you are on. Have you tried from another desktop or laptop?
In Splunk you can check your server.conf file
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf
When you are able to access the splunk with IP address and port, means that splunk is working fine.
When you are not able to access the splunk with hostname and port, the hostname is not assigned to that particular ip in the local system. Try with other system to access with hostname.
Sol: Check the host file in local system.

Bind9 DNS: Make webmail.mydomain.com go to a local IP instead of external IP

I have a mail server running on a linux server.
Internally, I can access it via https://192.168.0.253/webaccess and externally I can access it via https://webmail.mydomain.com/webaccess
I'd like to be able to access webmail.mydomain.com internally, the problem is that a DNS lookup to this address goes to the public IP of our network and from within, that won't work.
I have bind9 installed on our linux server (internal) and can use that for DNS lookups - that server is my primary DNS address. Could anyone please describe how I can configure bind to resolve webmail.mydomain.com to 192.168.0.253?
Configure Bind to use a different view for the internal users; see http://www.cyberciti.biz/faq/linux-unix-bind9-named-configure-views/
in /etc/hosts (or equivalent for the OS) on the client you can set webmail.mydomain.com to 192.168.0.253, as the hosts file is checked before any DNS servers.

Resources