One thing which I have not seen discussed yet -- the syslog.conf seems to work much better when you use tabs, not spaces, in it. So in your case it would be *.info;mail.none;authpriv.none;cron.none[tab][tab][tab]@192.168.1.5 Don't know if rsyslog.conf has the same requirement. -- /\oo/\ / /()\ \ David Mackintosh | dave at xdroop.com | http://www.xdroop.com -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20090524/0f84e52f/attachment-0005.sig>