Source Ip Address of Logging Sendmail

Hi,
I'm looking for a way to configure a specific Circuit Vlan #'s Ip Address as source ip address of log messages sent as result of the "logging sendmail" command. (at the moment Sw Version: 7.30).
Does anyone know a way get it ?
Thanx in advance !
Francesco

Francesco,
This info will come from the mgt ip address assigned on the CSS. You would need to change the mgt ip address on your box which will sendmail will then use:
Like this:
CS503# config
CS503(config)# b
boot Enter BOOT configuration mode
bridge Bridge parameters
bypass Configure Bypassed Service Action
CS503(config)# boot
CS503(config-boot)# ip address ?
Of the form a.b.c.d
CS503(config-boot)# ip address
Keep in mind that you do not want to use a circuit ip address range already being used on your CSS.
Regards
Pete..

Similar Messages

  • Log connection attempts and source IP address for connections that fail/timeout on RADIUS

    How can I log the connection attempts and source IP address for connections that fail RADIUS authentication?  I'm using RD Gateway on 2012 R2 in conjunction with Azure Multi-Factor Authentication Server on another 2012 R2 server.  When a user fails
    multifactor authentication or the authentication times out, all I get is Security event 6273 on the RD Gateway that the radius server did not process the request, and only the radius server's IP is logged.  There's nothing logged in TerminalServices-Gateway\Operational
    because the TS Gateway hasn't yet processed the connection attempt (all auditing options for RD Gateway are enabled).  The MFA/Radius Server is only logging the connection from the TSGateway - it doesn't know the original client's IP address.
    I'm looking for the equivalent of an IIS log - somewhere the RD Gateway should log the initial HTTPS connection attempt and the source IP address of the client.  I need to be able to track down potentially fraudulent login attempts. 

    Hi,
    Thank you for your posting in Windows Server Forum.
    This error might be caused by one of the following conditions:
    •  The user does not have valid credentials
    •  The connection method is not allowed by network policy
    •  The network access server is under attack
    •  NPS does not have access to the user account database on the domain controller
    •  NPS log files or the SQL Server database are not available
    To perform these procedures, you must be a member of Domain Admins.
    Please check for more information:
    Event ID 6273 — NPS Authentication Status
    http://technet.microsoft.com/en-us/library/cc735399(v=ws.10).aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • CSS11501 - source port and IP address for logging & TACACS

    (1) What source IP address does a CSS (ver 7.5) use for (a) logging, (b) TACACS? Is it always the management port IP address? Can it be specified?
    (2) What Eth port does a CSS (ver 7.5) use for (a) logging, (b) TACACS? Is it the management or a standard FE port. For TACACS it appears to be always the latter while the TACACS request still uses the IP address of the former? Is this correct? Can it be specified?

    In my experience this seems to be partially correct.
    Syslog, snmp-trap and icmp seem to use the management source interface based on the routing table. More specific routes added via "ip management route" command.
    The tacacs however seems to ignore these routes specified via "ip management route".

  • IIS Logs display CSS11501 IP address instead of external source IP address.

    (FW)---(CSS11501)---(SERVERS)
    Basic configuration, everything on VLAN1. Servers in web farm are logging attacks, etc. Source IP address all show the CSS instead of the originating IP address coming from the outside.
    What do I need to add/change to allow servers to see the actual IPs from the outside?

    Yes, inline configuration. FW connects to L2 switch crossed over to CSS, Servers are connected to CSS ports directly. However the servers Default Gateway is the FW not the CSS, that is what I believe I need to change in order for it to work, is that correct, or is there something else?
    Example:
    circuit VLAN1
    ip address x.x.x.x x.x.x.x
    owner xyz
    address "xyz"
    content rule.100.https
    protocol tcp
    port 443
    url "/*"
    add service serv.1.https weight 1
    add service serv.2.https weight 2
    add service serv.3.https weight 3
    vip address x.x.x.100
    application ssl
    advanced-balance ssl
    sticky-mask 255.255.255.0
    sticky-inact-timeout 15
    dnsbalance roundrobin
    balance srcip
    active
    group source.100
    vip address x.x.x.100
    add destination service serv.1.https
    add destination service serv.2.https
    add destination service serv.3.https
    active

  • CSMARS Source IP address

    I have a CSMARS box with the following rules set to send me an e-mail if they are triggered.
    System Rule: Password Attack: Remote VPN Access - Attempt
    System Rule: Password Attack: Remote VPN Access - Success Likely
    System Rule: Password Attack: System - Attempt
    My ASA authenticates against my ACS server. If I test any of the rules from our inside network address space CSMARS gives me the correct source IP addresses. However, if I run the same test from our outside IP address block my source address is displayed as 0.0.0.0. If I look at the " Failed Attempts" logs on the ACS server the correct source address is displayed. I'm wondering what I'm missing in order to have CSMARS display the correct source address.

    When you look at the acs logs for failed attempts, both the internal and external failures are in the same file and identically formatted?

  • CSS Source IP address Missing

    Server A, Server B, Server C are connected directly to CSS (Network Address 192.168.XX.XX). clients access the servers through Internet and get connected as well as load balanced. But our servers are unable to track the source IP address of the clients logging through Internet. Is there any configuration where servers can track the source IP address.

    Hi,
    The CSS would be doing source NATing if you have a group configured with "add destination service".
    This is needed to prevent asymmetric flows, but if the servers are directly connected to the CSS, there would be no asymmetric flows, hence you can get rid of the group and the CSS will start sending traffic to the server with original client's IP.
    Configure the CSS as the default gateway of your servers to make sure they wont bypass the CSS on the way back.
    Hope it helps!!
    Diego M.

  • Ip igmp snooping querier on Nexus, what source IP address to use?

    Am looking at a problem with servers in the same vlan across multiple switches that are unable to communicate using multicast. I have found that in the systen I'm to set up I need to apply the ip igmp snooping querier command, in the vlan, but it needs a source IP address.
    Different documents make conflicting recommendations for this address, one suggests that any unused address will do, another suggests to use the IP address that is configured on the SVI for the vlan.
    Which is correct?

    Eventually I had to ask Cisco TAC, the response was that any IP address within the subnet could be used. The recommendation was to allocate an unused address in the vlan subnet for this purpose, use the same address on multiple switches should resiliance be required.

  • ISCSI Initiator favourites revert to using the IPv6 or the apipa IP address from other NICs instead of the source IP address that I specified

    Windows 2008 R2
    ISCSI Initiator favourites revert to using the IPv6 or the apipa IP address from other NICs instead of the source IP address that I specified. 
    When I manually connect to multiple targets and specify the correct ISCSI source IP address, I check the favourites and everything looks okay. But when the server is rebooted I check the favourites again and the source IP is now referencing the IPv6 and
    sometimes the apipa address. 
    I have unbound IPv6 from the ISCSI NICS but this has made no difference.
    Can anyone explain why this is happening?
    Although the server still reconnects to the storage oaky, I’m concerned that if a path goes down that is might try to use the wrong interface to re-establish a connection.
    Thanks.  

    Hi,
    IPV6 is supported with MS iSCSI. Do you have Multiple Connections per Session (MCS) configured? Is your storage configured to use both IPv4 and IPv6?
    If yes, please see if http://support.microsoft.com/kb/2014131 helps.
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • How to change the source ip address

    hi all,
    i got the problem that how to change the source ip address when i
    get a website's page!
    i mean i want to change the source ip address when i access the
    remote website, sure i know when change the source ip, i can not get
    the result correctly when changing the source ip address, but it is not
    important to get the result i just want to send out a "click" event to the website by calling a post method in the site!
    does anybody have some ideas?
    Best Regards,
    Eric Gau

    Here's some code that connects to google and does a get:
    import java.io.*;
    import java.net.*;
    public class HTTPTest {
        private Socket sock;
        private BufferedReader in;
        private BufferedWriter out;
        private boolean running = false;
        HTTPTest() {
        private void go(String site) {
            try {
                sock = new Socket(site, 80);
                in = new BufferedReader(new InputStreamReader(sock.getInputStream()));
                out = new BufferedWriter(new OutputStreamWriter(sock.getOutputStream()));
                System.out.println("Connected");
                out.write("GET / HTTP/1.1\r\n\r\n");
                out.flush();
                doRead();
            } catch (IOException e) {
                e.printStackTrace();
        private void doRead() {
            running = true;
            String line;
            System.out.println("Read started");
            while (running) {
                try {
                    line = in.readLine();
                } catch (IOException e) {
                    e.printStackTrace();
                    line = null;
                if (line == null) {
                    running = false;
                } else {
                    System.out.println(line);
            System.out.println("Socket closed");
        public static void main(String [] args) {
            String site;
            if (args.length > 0) {
                site = args[0];
            } else {
                site = "google.ca";
            new HTTPTest().go(site);
    }

  • HT201303 How can I find out the ip address that logged into my account?

    How can I find out the ip address that logged into my account?

    Open Airport Utility. You should find it in there under the Internet tab.

  • Redirect based on source IP address????

    I have a site that I don't want our competitors to view! By
    tracking code, I have managed to obtain their source IP addresses.
    After looking around, there is a .php solution to my problem
    but my host is not well suited to .php files (although it does some
    processing).
    My pages are in .shtml (to process css drop-down menus
    correctly) and I understand that this attached code, if put at the
    top of the page before anything else, will work.
    I have managed to get one working
    http://www.donbur.co.uk/gb/newindex.php
    but am having difficulty getting this code to work elsewhere.
    The problem is, when I try to put this code into either a
    template or as an include, it won't process correctly or the page
    won't render at all.
    Do I have to use .php files or can I insert php script into
    an .shtml document.
    Getting really confused now.... HELP

    Thanks for the constructive advice...
    quote:
    >After looking around, there is a .php solution to my
    problem but my host is not well
    >suited to .php files (although it does some processing).
    What does this mean? Does your hosting plan include php
    support or not?
    You can't just put a php script into any page. It needs to be
    a .php page or you need to reconfigure the server to parse other
    pages for php. But if your hosting plan doesn't support php then it
    won't work in any case.
    My host is BT Internet and they claim not to process .php
    files which is why our main .php site is hosted elsewhere; however,
    it seems that, although it has difficulty (to clarify: doesn't
    render) with main full scripts, it does seem to process simple
    <?php echo commands for example.
    It has been suggested on another forum that the .shtml files
    are set to be recognised by .php in the cpanel but our host will
    not do this...
    Our competitors are not particularly smart or up-to-date and
    this would have been reasonably effective; however, I bow to better
    judgement and close this topic.

  • Load balancing based on source IP address

    Hi,
    I configured a CSS to balance the load depending on source IP address to suppport a application feature in the server.
    We have two firewalls and behind we have different users. We have also two servers behind the CSS.
    Firewalls perform NAT with a unique outside IP address. So, for example, in these conditions the CSS balances requests coming from FW 1 to server 1 and requests coming from FW 2 to server 2. Is it correct this scenario?
    Is it possible that requests coming from FW 1 could be forwarded to Server 2 and viceversa?
    Could anyone answer me?
    Thanks in advance.
    Best regards.
    Giuseppe.

    Giuseppe,
    it all depends on how you configured your CSS.
    Did you use an ACL to force traffic from SRC1 to server1 and traffic from SRC2 to server2 ?
    Or did you simply configure sticky based on source ip or a source ip hash loadbalancing ?
    Except the ACL, all other methods do not guarantee that the traffic will be splitted in 2.
    Gilles.

  • Route call based on source IP address

    Hello Guys,
    Is there a way to route calls based on source IP address?
    I want to redirect calls to specific queues based on the ip of the phone who's starting it.
    Any ideas?
    Thanks in advance.
    Filipe Leite                  

    Hi Filipe
    I'm assuming here that you are using CallManager rather than CME?
    One option might be to use the 'device mobility' feature to assign a specific CSS to devices based on their IP subnet. That CSS could have the appropriate partitions to route to a seperate trigger that directs calls to a separate CSQ.
    Of course, whether you can do this depends on whether it would be appropriate to override the device CSS in this way.
    Aaron

  • Source URL/Address - Hazel

    Hazel is not supporting my credit card so I cant get it. But in the trial version Hazel has this property "Source URL/Address" which is the same information as "Where from" value in "Get info" in the contextual menu of a file. 
    Does anyone know how to access this Where from value through AppleScript? If Hazel can do it why cant AppleScript?

    Hi
    set the_path to POSIX path of (choose file) as string
    set the_where_froms to (do shell script "mdls -name kMDItemWhereFroms " & quoted form of the_path)
    Hope this helps.
    H

  • Doing Source IP address NAT. Using 1 address vs using many

    I have a few implimentations where I am using source groups to do NAT on the client's source IP address. It is possible to always translate the source IP address to the same one, or to have it be different depending on the content rule you hit.
    Is there any advantage of one over the other?

    Thanks for the thoughts. I am aware of the content rule limitation, and actually, (depending on your definition of PAT vs NAT) the CSS can do NAT of the source IP address using source groups and an ACL. It can translate the source IP address of an incoming packet from a client into a different IP address. You don't really have a pool of addresses like you do on a Cisco router, you can specify a single IP address to translate the source address to, or different ones depending on the content rule you hit, so it is kind of like NATing with overload on a router. I am doing it now.
    The basic steps for doing NAT on the source(I.E.-Client's) IP address are:
    group [groupx]
    ip address [source address you want to change client IP to]
    active
    acl 1
    clause 10 permit any any destination [VIP of content rule] sourcegroup [groupx]
    apply circuit-(VLANx)
    If the inbound packet on VLANx matches all the criteria in the clause statement, the "sourcegroup" part of the clause statement links you to the ip address that you want to NAT your client's source address to.
    You can build on this and make it as fancy as you like, even translating the source address to different addresses depending on the content rule you hit. I'm just wondering if there is an advantage of using many different IP addresses over using just one.

Maybe you are looking for