File tree Expand file tree Collapse file tree 5 files changed +6
-52
lines changed Expand file tree Collapse file tree 5 files changed +6
-52
lines changed Original file line number Diff line number Diff line change @@ -195,7 +195,6 @@ Available scripts
195195* [ Mode button with multiple presses] ( doc/mode-button.md )
196196* [ Manage DNS and DoH servers from netwatch] ( doc/netwatch-dns.md )
197197* [ Notify on host up and down] ( doc/netwatch-notify.md )
198- * [ Manage remote logging] ( doc/netwatch-syslog.md )
199198* [ Visualize OSPF state via LEDs] ( doc/ospf-to-leds.md )
200199* [ Manage system update] ( doc/packages-update.md )
201200* [ Run scripts on ppp connection] ( doc/ppp-on-up.md )
Original file line number Diff line number Diff line change 1- Manage remote logging
2- =====================
1+ This script has been dropped. Filtering in firewall is advised, which should
2+ look something like this:
33
4- [ ◀ Go back to main README] ( ../README.md )
5-
6- Description
7- -----------
8-
9- RouterOS supports sending log messages via network to a remote syslog server.
10- If the server is not available no log messages (with potentially sensitive
11- information) should be sent. This script disables remote logging by
12- availability.
13-
14- Requirements and installation
15- -----------------------------
16-
17- Let's assume there is a remote log action and associated logging rule:
18-
19- /system/logging/action/set remote=10.0.0.1 [ find where name="remote" ];
20- /system/logging/add action=remote topics=info;
21-
22- Just install the script:
23-
24- $ScriptInstallUpdate netwatch-syslog;
25-
26- ... and create a netwatch matching the IP address from logging action above:
27-
28- /tool/netwatch/add down-script=netwatch-syslog host=10.0.0.1 up-script=netwatch-syslog;
29-
30- All logging rules are disabled when host is down.
31-
32- ---
33- [ ◀ Go back to main README] ( ../README.md )
34- [ ▲ Go back to top] ( #top )
4+ /ip/firewall/filter/add action=reject chain=output out-interface-list=WAN port=514 protocol=udp reject-with=icmp-admin-prohibited;
5+ /ip/firewall/filter/add action=reject chain=forward out-interface-list=WAN port=514 protocol=udp reject-with=icmp-admin-prohibited;
Original file line number Diff line number Diff line change 9393 82="Renamed the comment parameter 'hostname' to just 'name' for 'netwatch-notify'.";
9494 83="Introduced new setting to disable news and change notifications, dropped version from configuration.";
9595 84="Support for e-mail notifications moved to a module. It is installed automatically if required.";
96+ 85="Dropped 'netwatch-syslog', filtering in firewall is advised.";
9697};
9798
9899# Migration steps to be applied on script updates
Original file line number Diff line number Diff line change 1010:local 0 "global-functions";
1111
1212# expected configuration version
13- :global ExpectedConfigVersion 84 ;
13+ :global ExpectedConfigVersion 85 ;
1414
1515# global variables not to be changed by user
1616:global GlobalFunctionsReady false;
Load Diff This file was deleted.
You can’t perform that action at this time.
0 commit comments