Syslog -- Security Issues in Network Event Logging
About Syslog	English (USA)
Syslog is a de-facto standard for logging system events. However, the protocol component of this event logging system has not been formally documented. While the protocol has been very useful and scalable, it has some known but undocumented security problems. For instance, the messages are unauthenticated and there is no mechanism to provide verified delivery and message integrity. To see the collection of prior postings to the list, visit the Syslog Archives.
Using Syslog
To post a message to all the list members, send email to syslog@ietf.org. You can subscribe to the list, or change your existing subscription, in the sections below.
Subscribing to Syslog
Subscribe to Syslog by filling out the following form. You will be sent email requesting confirmation, to prevent others from gratuitously subscribing you. This is a private list, which means that the list of members is not available to non-members. Your email address:   Your name (optional):   You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext. If you choose not to enter a password, one will be automatically generated for you, and it will be sent to you once you've confirmed your subscription. You can always request a mail-back of your password when you edit your personal options. Once a month, your password will be emailed to you as a reminder. Pick a password:   Reenter password to confirm:   Which language do you prefer to display your messages? English (USA)   Would you like to receive list mail batched in a daily digest? No Yes
Syslog Subscribers
(The subscribers list is only available to the list members.) Enter your address and password to visit the subscribers list: Address: Password:    To unsubscribe from Syslog, get a password reminder, or change your subscription options enter your subscription email address: If you leave the field blank, you will be prompted for your email address