Memory Log Receiver; Smtp Event Receiver - D-Link DFL-1600 User Manual

5.2. Log Receivers
Feb 5 2000 09:45:23 gateway.ourcompany.com FW: DROP:
Subsequent text is dependent on the event that has occurred.
In order to facilitate automated processing of all messages, D-Link Firewall
writes all log data to a single line of text. All data following the initial text
is presented in the format name=value. This enables automatic filters to
easily find the values they are looking for without assuming that a specific
piece of data is in a specific location in the log entry.
In a D-Link firewall, up to 8 Syslog receivers can be configured, and they
can be grouped into one or more receiver groups.
Compared to the Memory Log Receiver which is introduced next, Syslog
receivers can be used for safer and long-term storage of logged events.
These log servers provide centralized management of log files, and backup
of the files is possible depending on the particular Syslog recipient(s) in use.
5.2.2

Memory Log Receiver

D-Link firewalls can act as log receivers with their built-in memories. When
memory log receiver is enabled in the firewall, all events will be saved to the
log file in the memory, and the most currently generated entries of the file
can be displayed to the administrator upon requests. This log file storage is
temporary, all contents of the file will be cleaned after reboot of the
firewall, and there is no backup. Only one memory log receiver can be
configured for a single firewall.
5.2.3

SMTP Event Receiver

A unique feature designed for IDS/IDP events logging and alerts is
provided by D-Link firewalls, named as SMTP Event Receiver. Upon
proper configuration, the firewall is able to log possible intrusions and
notifies the administrator by sending e-mail(s) to specific e-mail
address(es). For more information about this function, please refer to
SMTP Log Receiver for IDS Events.
D-Link Firewalls User's Guide
29
19.5