4.56: Solaris syslog issues (+workarounds)

[Jeff A. Earickson]

Julian,

Thanks to postings by Nick Smith and Rene Berber on the thread,
"4.56.7: max message size is 40000", I got 4.56.7 going on my
Solaris 10 box.  My setup: Solaris 10 6/06 + current patches,
MS 4.56.7, perl 5.8.8, Sys:Syslog 0.18.  Here is what I discovered:

1) Comment out the line:

LOG_FROM_REMOTE=NO

from /etc/default/syslogd, restart syslogd ("svcadm -v restart system-log")
AND 
use the Log.pm file as shipped with version 4.56.7 ==> WORKS.
(Suggestion thanks to Nick Smith).

2) Leave /etc/default/syslogd alone and modify Log.pm, per Rene
Berber's suggestion:

line 39 -
use Sys::Syslog qw(:DEFAULT setlogsock);

line 71 -
         Sys::Syslog::setlogsock('native');

This also WORKS.  I had to have both changes in place for MailScanner
to go.

I opted for suggestion one to get going.  I'm sure this will bite
others later.  Which way to go?  Maybe add more logic to the 
"if ($^O =~ /solaris|sunos|irix/i)" test in Log.pm?

Jeff Earickson
Colby College