Skip to content

Commit bfe2cbf

Browse files
committed
drop 'netwatch-syslog'
To filter in firewall you should use something like this: /ip/firewall/filter/add action=reject chain=output out-interface-list=WAN port=514 protocol=udp reject-with=icmp-admin-prohibited; /ip/firewall/filter/add action=reject chain=forward out-interface-list=WAN port=514 protocol=udp reject-with=icmp-admin-prohibited;
1 parent eccc187 commit bfe2cbf

File tree

5 files changed

+6
-52
lines changed

5 files changed

+6
-52
lines changed

README.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -195,7 +195,6 @@ Available scripts
195195
* [Mode button with multiple presses](doc/mode-button.md)
196196
* [Manage DNS and DoH servers from netwatch](doc/netwatch-dns.md)
197197
* [Notify on host up and down](doc/netwatch-notify.md)
198-
* [Manage remote logging](doc/netwatch-syslog.md)
199198
* [Visualize OSPF state via LEDs](doc/ospf-to-leds.md)
200199
* [Manage system update](doc/packages-update.md)
201200
* [Run scripts on ppp connection](doc/ppp-on-up.md)

doc/netwatch-syslog.md

Lines changed: 4 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -1,34 +1,5 @@
1-
Manage remote logging
2-
=====================
1+
This script has been dropped. Filtering in firewall is advised, which should
2+
look something like this:
33

4-
[◀ Go back to main README](../README.md)
5-
6-
Description
7-
-----------
8-
9-
RouterOS supports sending log messages via network to a remote syslog server.
10-
If the server is not available no log messages (with potentially sensitive
11-
information) should be sent. This script disables remote logging by
12-
availability.
13-
14-
Requirements and installation
15-
-----------------------------
16-
17-
Let's assume there is a remote log action and associated logging rule:
18-
19-
/system/logging/action/set remote=10.0.0.1 [ find where name="remote" ];
20-
/system/logging/add action=remote topics=info;
21-
22-
Just install the script:
23-
24-
$ScriptInstallUpdate netwatch-syslog;
25-
26-
... and create a netwatch matching the IP address from logging action above:
27-
28-
/tool/netwatch/add down-script=netwatch-syslog host=10.0.0.1 up-script=netwatch-syslog;
29-
30-
All logging rules are disabled when host is down.
31-
32-
---
33-
[◀ Go back to main README](../README.md)
34-
[▲ Go back to top](#top)
4+
/ip/firewall/filter/add action=reject chain=output out-interface-list=WAN port=514 protocol=udp reject-with=icmp-admin-prohibited;
5+
/ip/firewall/filter/add action=reject chain=forward out-interface-list=WAN port=514 protocol=udp reject-with=icmp-admin-prohibited;

global-config.changes

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,7 @@
9393
82="Renamed the comment parameter 'hostname' to just 'name' for 'netwatch-notify'.";
9494
83="Introduced new setting to disable news and change notifications, dropped version from configuration.";
9595
84="Support for e-mail notifications moved to a module. It is installed automatically if required.";
96+
85="Dropped 'netwatch-syslog', filtering in firewall is advised.";
9697
};
9798

9899
# Migration steps to be applied on script updates

global-functions

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
:local 0 "global-functions";
1111

1212
# expected configuration version
13-
:global ExpectedConfigVersion 84;
13+
:global ExpectedConfigVersion 85;
1414

1515
# global variables not to be changed by user
1616
:global GlobalFunctionsReady false;

netwatch-syslog

Lines changed: 0 additions & 17 deletions
This file was deleted.

0 commit comments

Comments
 (0)