CHANGELOG

* Fri Sep 13 2024 Steven Pritchard <steve@sicura.us> - 8.9.0
- [puppetsync] Update module dependencies to support simp-iptables 7.x

* Wed May 15 2024 Mike Riddle <mike@sicura.us> - 8.8.0
- Moved legacy control character parms into global params

* Tue Feb 27 2024 Mike Riddle <mike@sicura.us> - 8.7.0
- Added a parameter that allows users to define rsyslog rules via hieradata

* Mon Oct 23 2023 Steven Pritchard <steve@sicura.us> - 8.6.0
- Add EL9 support

* Wed Oct 11 2023 Steven Pritchard <steve@sicura.us> - 8.5.0
- [puppetsync] Updates for Puppet 8
  - These updates may include the following:
    - Update Gemfile
    - Add support for Puppet 8
    - Drop support for Puppet 6
    - Update module dependencies

* Thu Sep 07 2023 Steven Pritchard <steve@sicura.us> - 8.4.0
- Add AlmaLinux 8 support

* Mon Jun 12 2023 Chris Tessmer <chris.tessmer@onyxpoint.com> - 8.3.0
- Add RockyLinux 8 support

* Fri Jun 03 2022 Chris Tessmer <chris.tessmer@onyxpoint.com> - 8.2.0
- Update from camptocamp/systemd to puppet/systemd

* Wed Jun 16 2021 Chris Tessmer <chris.tessmer@onyxpoint.com> - 8.1.0
- Removed support for Puppet 5
- Ensured support for Puppet 7 in requirements and stdlib

* Fri Jan 29 2021 Liz Nemsick <lnemsick.simp@gmail.com> - 8.0.0
- Removed support for Rsyslog < 8.24.0.
  - Rsyslog >= 8.24.0 is used for EL7.4 and later.
  - simp/rsyslog 7.6.4 should be used to manage earlier Rsyslog versions.
- Removed support for CentOS 6.
- Added ability to set the default template used for forwarding
  - `rsyslog::config::default_forward_template`
- Added parameters to allow additional configuration of the rsyslog modules
  and main queue already managed by this Puppet module:
  - `rsyslog::config::extra_global_params`
  - `rsyslog::config::extra_legacy_globals`
  - `rsyslog::config::extra_imjournal_mod_params`
  - `rsyslog::config::extra_imklog_mod_params`
  - `rsyslog::config::extra_imptcp_mod_params`
  - `rsyslog::config::extra_imtcp_mod_params`
  - `rsyslog::config::extra_imudp_mod_params`
  - `rsyslog::config::extra_imuxsock_mod_params`
  - `rsyslog::config::extra_main_queue_params`
- Added 'Direct' and 'Disk' to allowed main message queue types.
- Removed a deprecated/unused parameters
  - `rsyslog::config::action_send_stream_driver_permitted_peers`
  - `rsyslog::config::interval`
  - `rsyslog::config::main_msg_queue_worker_timeout_thread_shutdown`
- Removed parameters only relevant to Rsyslog < 8.6.0
  - `rsyslog::config::host_list`
  - `rsyslog::config::domain_list`
- Deprecated parameters that corresponded to obsolete legacy globals
  and provided more appropriately-named replacements.
  - Use of old parameters will result in a compilation warning messages.
  - The replacement parameter is listed in each warning message.
  - Affected parameters:
    - `rsyslog::config::action_send_stream_driver_mode` => `rsyslog::config::imtcp_stream_driver_mode`
    - `rsyslog::config::action_send_stream_driver_auth_mode` => `rsyslog::config::imtcp_stream_driver_auth_mode`
    - `rsyslog::config::disable_remote_dns` => `rsyslog::config::net_enable_dns`
    - `rsyslog::config::suppress_noauth_warn` => `rsyslog::config::net_permit_acl_warning`
- Deprecated `rsyslog::config::default_template` and provided a more
  appropriately named replacement, `rsyslog::config::default_file_template`
  - Use of old parameter will result in a compilation warning message.
- Fixed a bug in which the rsyslog service would start without any errors but
  fail to log when `rsyslog::config::default_template` was set to 'traditional'.
  That value did not map to a valid Rsyslog built-in template.
- Fixed a bug where the `net.permitACLWarning` global was set incorrectly.
- Removed non-functioning, unused Rsyslog::Template['defaultTemplate'] resource.
- Internally, updated some of the legacy Rsyslog configuration to Rainer script
  format.
  - Load the imjournal module and set its state file using `load()`.
  - Set the `omfile`'s default template in its `load()` statement.
  - Use the `global()` configuration object for the following:
    - localHostname
    - defaultNetstreamDriverCertFile
    - defaultNetstreamDriver
    - defaultNetstreamDriverCAFile
    - defaultNetstreamDriverKeyFile

* Wed Oct 28 2020 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.6.4-0
- Fixed the default security collection string for firewalld rules
- Removed the `filter_` rules that were present for an old (and broken) version
  of the simp_firewalld module.
- Fixed the README and replaced 'iptables' references with 'firewall' where
  appropriate

* Tue Jun 30 2020 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.6.3-0
- Update REFERENCE.md

* Mon Jun 22 2020 Kendall Moore <kendall.moore@onyxpoint.com> - 7.6.2-0
- Add support for KeepAlive variables for imtcp and omfwd actions

* Tue May 26 2020 Kendall Moore <kendall.moore@onyxpoint.com> - 7.6.1-0
- Change local rule defined type to use the same package defaults for
  action queues that are in the remote rule defined type

* Wed Apr 15 2020 Kendall Moore <kendall.moore@onyxpoint.com> - 7.6.0-0
- Change remote rule defined type to use package defaults for action
  queues

* Mon Feb 03 2020 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.6.0-0
- Add a default rule to log packets dropped by firewalld to
  /var/log/firewall.log
- Add /var/log/firewall.log to SIMP's 'syslog' logrotate rule
- Move iptables, logrotate, pki, and tcpwrappers to optional dependencies
- Cleaned up puppet strings support
- Removed params pattern and migrated to data in modules

* Fri Jan 10 2020 Liz Nemsick <lnemsick.simp@gmail.com> - 7.6.0-0
- Added EL8 support

* Wed Oct 16 2019 Adam Yohrling <adam.yohrling@onyxpoint.com> - 7.5.1-0
- Added logrotate::rule options to rsyslog::conf::logrotate class

* Wed Oct 16 2019 Kendall Moore <kendall.moore@onyxpoint.com> - 7.5.1-0
- Fixed a bug where including rsyslog.d parsed more than just .conf files

* Thu Jun 06 2019 Steven Pritchard <steven.pritchard@onypoint.com> - 7.5.0-0
- Add v2 compliance_markup data

* Mon Apr 15 2019 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.4.0-0
- Set rsyslog::rule::local::file_create_mode to 0640 by default
- Allow the following to be set directly via Hiera using simplib::dlookup:
  - rsyslog::rule::local::file_create_mode
  - rsyslog::rule::local::dir_create_mode
  - rsyslog::rule::local::queue_max_file_size

* Tue Mar 26 2019 Joseph Sharkey <shark.bruhaha@gmail.com> - 7.4.0-0
- Updated dependencies to use camptocamp/systemd

* Mon Mar 04 2019 Liz Nemsick <lnemsick.simp@gmail.com> - 7.3.1-0
- Expanded the upper limit of the stdlib Puppet module version
- Updated a URL in the README.md

* Thu Oct 11 2018 Nick Miller <nick.miller@onyxpoint.com> - 7.3.0-0
- Changed rsyslog::install::ensure from 'latest' to 'installed'
  - It will also respect `simp_options::package_ensure`

* Mon Oct 08 2018 Jeanne Greulich <jeanne.greulich@onyxpoint.com> - 7.3.0-0
- Added logic to properly handle rsyslogd parameters for V8.6 and later
  as documented in CentOS 7.5 Release notes.  These include moving -x and -w
  options to global.conf and issuing deprecation warning for -l and -s
  options.

* Fri Oct 05 2018 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.3.0-0
- Fixed a bug in the systemd override file for rsyslog
- Added fact for version of rsyslogd
- Updated templates to use RainerScript rsyslogd v8 and later
- Fixed the MainMsgQueueDiscardMark and MainMsgQueueWorkerThreads
  parameters

* Wed Oct 03 2018 Liz Nemsick <lnemsick.simp@gmail.com> - 7.3.0-0
- Update range of simp/systemd to allow version with Hiera 5

* Tue Sep 11 2018 Nicholas Markowski <nicholas.markowski@onyxpoint.com> - 7.3.0-0
- Updated $app_pki_external_source to accept any string. This matches the
  functionality of pki::copy.

* Thu Aug 30 2018 Jeanne Greulich <jeanne.greulich@onyxpoint.com> 7.3.0-0
- Updated rsyslog::rule::remote to select a more intelligent default
  for StreamDriverPermittedPeers, when TLS is enabled.  This improvement
  fixes the bug in which forwarding of logs to servers in different domains
  was not possible with the stream_driver_permitted_peers default.  Now,
  rsyslog::rule::remote::stream_driver_permitted_peers defaults to 'undef',
  instead of the domain of the Puppet client, and has the following default
  behavior:
  - When all of the remote servers are specified with hostname variants, the
    StreamDriverPermittedPeers directive for the forwarding action for each
    server will be set to that server's hostname.
  - If any of the remote servers is specified as an IP address variant, the
    StreamDriverPermittedPeers directive for the forwarding action for
    each server will be set to the domain of the Puppet client.

* Fri Aug 24 2018 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.3.0-0
- Updated the tests to no longer reference sudosh as our custom test since we
  are moving away from using it and it could cause confusion.

* Fri Aug 17 2018 Liz Nemsick <lnemsick.simp@gmail.com> - 7.2.0-0
- Fixed a bug in which removal of a rsyslog::rule from the catalog
  did not cause the rsyslog service to restart, when other rules
  corresponding to files in the same rsyslog configuration
  subdirectory were present.

* Fri Aug 10 2018 Liz Nemsick <lnemsick.simp@gmail.com> - 7.2.0-0
- Reinstated ActionSendStreamDriverMode directive into the global
  configuration when sending TLS-encrypted messages for Rsyslog
  7 version, only. The sending of TLS-encrypted messages for CentOS 6
  will not work otherwise.

* Mon Jul 30 2018 ralph-wright <ralph.wright@onyxpoint.com> - 7.2.0-0
- Remove all ActionSendStreamDriver* directives from the global
  configuration, to allow individual actions to control their specific
  stream settings.  This change was required to allow a host which is
  itself a syslog server to receive TLS-encrypted data, but forward
  these messages to a different remote syslog server as unencrypted data.

* Fri Jul 13 2018 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.2.0-0
- Add support for Puppet5 and OEL
- Update acceptance tests to use environment variables

* Thu Jun 28 2018 Nick Miller <nick.miller@onyxpoint.com> - 7.1.3-0
- Update docs
- Update ci assets

* Tue May 22 2018 Liz Nemsick <lnemsick.simp@gmail.com> - 7.1.2-0
- Add a systemd rsyslog.service override file that fixes a service
  ordering problem present with older versions of rsyslog.  The
  override ensures the network.target and network-online.target units
  are added to the 'Wants' and 'After' lists for the rsyslog.service.

* Fri Mar 16 2018 Philippe Muller <philippe.muller@gmail.com> - 7.1.1-0
- Fixed several cases where literal '\n' was contained in file output

* Mon Jul 31 2017 Liz Nemsick <lnemsick.simp@gmail.com> - 7.1.0-0
- Add ability to specify full rule content for rsyslog::rule::local
  and rsyslog::rule::remote defined types.
- Fixed bug in which ioBufferSize parameter was listed twice
  in the rsyslog rule generated by rsyslog::rule::local.

* Fri May 26 2017 Liz Nemsick <lnemsick.simp@gmail.com> - 7.0.3-0
- Fixed bug in which default iptables rsyslog rule did not work
  with rsyslog version 7.4.7.  Some versions of rsyslog include
  the ' ' separator in the message payload, which impacts the
  startswith rule.
- Fixed bug whereby puppetserver log messages were not being
  collected in puppetserver-specific logs.
- Update puppet requirement in metadata.json

* Wed Apr 19 2017 Nick Markowski <nmarkowski@keywcorp.com> - 7.0.3-0
- rsyslog::server::enable_selinux now optional, for robustness
- Updated logrotate to use new lastaction API

* Tue Mar 28 2017 Nick Miller <nick.miller@onyxpoint.com> - 7.0.2-0
- rsyslog::server now uses the state of selinux on the system instead
  of simp_options

* Thu Mar 23 2017 Jeanne Greulich <jeanne.greulich@onyxpoint.com> - 7.0.2-0
- Updated path for systemctl

* Thu Feb 09 2017 Jeanne Greulich <jeanne.greulich@onyxpoint.com> - 7.0.1-0
- Updated path for service to /sbin/service

* Tue Feb 07 2017 Jeanne Greulich <jeanne.greulich@onyxpoint.com> - 7.0.0-0
- Updated expression in logrotate for lastaction to evaluate correctly

* Wed Jan 11 2017 Nick Markowski <nmarkowski@keywcorp.com> - 7.0.0-0
- Updated pki to use new scheme
- Application certs now managed in /etc/pki/simp_apps/rsyslog/x509
- Added trailing newline to drop rules

* Sun Dec 11 2016 Trevor Vaughan <tvaughan@onyxpoint.com> - 7.0.0-0
- Update to Puppet 4 compatibility
- Added strong typing

* Wed Nov 23 2016 Jeanne Greulich <jgreulich.simp@onyxpoint.com> - 6.0.0-0
- update requirement versions

* Mon Nov 21 2016 Chris Tessmer <chris.tessmer@onyxpoint.com> - 6.0.0-0
- Minor cleanup

* Wed Nov 16 2016 Liz Nemsick <lnemsick.simp@gmail.com> - 6.0.0-0
- Updated iptables dependency version

* Thu Nov 03 2016 Nick Miller <nick.miller@onyxpoint.com> - 6.0.0-0
- Added a feature to read journald, enabled by defauly on systems with systemd.
- Updated to use compliance mapper v2.0.0

* Mon Sep 26 2016 Liz Nemsick <lnemsick.simp@gmail.com> - 5.1.1-0
- Fix a bug in which rules no longer managed by the module were
  not removed from the system.

* Mon Mar 21 2016 Trevor Vaughan <tvaughan@onyxpoint.com> - 5.1.0-0
- Migrated to Semantic Versioning 2.0
- Fixed a bug where the ability to use custom templates was omitted from the
  remote logging rules.
- Ensure that all components of the module are pulled onto the system via the
  RPM.
- Added support for the global $LocalHostName variable and set it to $::fqdn by
  default.
- Updated RPM requirements

* Sat Mar 19 2016 Trevor Vaughan <tvaughan@onyxpoint.comm> - 5.0.1-0
- Migrated use_simp_pki to a global catalyst.

* Thu Feb 25 2016 Ralph Wright <ralph.wright@onyxpoint.com> - 5.0.0-2
- Added compliance function support

* Mon Nov 09 2015 Chris Tessmer <chris.tessmer@onypoint.com> - 5.0.0-1
- migration to simplib and simpcat (lib/ only)

* Tue Jul 21 2015 Kendall Moore <kmoore@keywcorp.com> - 5.0.0-0
- Support RSyslog versions >= 7
- Remove legacy style RainerScript where possible
- Use new style SIMP puppet module layout

* Thu Feb 19 2015 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-13
- Migrated to the new 'simp' environment.

* Fri Jan 16 2015 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-12
- Changed puppet-server requirement to puppet

* Sat Dec 06 2014 Chris Tessmer <chris.tessmer@onyxpoint.com - 4.1.0-11
- backported host_is_me protection from 4.0.X fixes

* Wed Nov 19 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-10
- This is a relatively large update to the rsyslog module that
  (hopefully) fixes the last vestiges of the issues seen with
  multi-server failover and native TLS encryption.
- The main change is that we no longer support using stunnel but,
  instead, rely on native Rsyslog encryption for all actions.
- Message throttling is now *off* by default. This is a site-specific
  need and we just can't guess correctly.

* Mon Nov 03 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-9
- The lastaction restart of rsyslog in logrotate was changed to use the
  'service' command for RHEL7 compatibility.

* Tue Oct 07 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-8
- Ensure that MainMsgQueueSize is always > 0
- Ensure that the number of threads is always > 0

* Mon Sep 29 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-7
- Changed MainMsgQueueOnlyWhenPreviousIsSuspended and
  MainMsgQueueFileDefaultTemplate to be applied to the ActionQueue.

* Tue Sep 02 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-6
- Updated all instances of ActionQueue to MainMsgQueue in the global
  configuration. This makes the global disk queueing work as expected.

* Tue Jun 24 2014 Nick Markowski <nmarkowski@keywcorp.com> - 4.1.0-5
- Changed all checksums to sha256 instead of md5 in an effort to enable FIPS.

* Fri May 16 2014 Kendall Moore <kmoore@keywcorp.com> - 4.1.0-4
- Removed all stock classes and corresponding spec tests so they can be ported to the simp module.

* Tue May 13 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-4
- Updated to support most queueing options as applied to the default
  action queue.

* Sun May 04 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-3
- Ensure that all managed rsyslog configurations are written to
  /etc/rsyslog.d/puppet_managed and that unmanaged rules are selectively purged.
- Added an rsyslog::stock class which properly multiplexes between the local
  and server stock classes.
- Updated spec tests

* Wed Apr 09 2014 Kendall Moore <kmoore@keywcorp.com> - 4.1.0-2
- Refactored manifests for puppet 3 and hiera compatibility.
- Added spec tests.

* Tue Apr 01 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-1
- Changed all calls to stunnel::stunnel_add to stunnel:add.
- Removed the default size in rsyslog::stock::log_server since it
  conflicts with the default weekly rotation.
- Updated the default log format to be the Rsyslog default.
- Discovered a bug when enabling SELinux on both the client and server and
  moved the port for the log client to handle the SELinux rules.
- Added an stunnel rule for rsyslog that listens on the registered syslog-tls
  port.
- Flipped the singleton defines over to classes.
- Ensure that Stunnel traffic listens on all interfaces by default.
- Disabled the listeners on the log_local stock class since it is unnecessary
  and was interfering with Logstash.
- Added the ability to modify the rate limiting settings in
  rsyslog::global.
- Moved the include statement in the global conf template to after the
  definition of the default message template so that items in
  rsyslog.d can use it directly.

* Thu Feb 20 2014 Nick Markowski <nmarkowski@keywcorp.com> - 4.1.0-0
- Moved log forwarder rule (stock/log_server/forward.pp) from /etc/rsyslog.conf
  to /etc/rsyslog.d/remote.conf

* Wed Feb 12 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.1.0-0
- Converted all string booleans to booleans
- Fixed all lint errors

* Thu Jan 02 2014 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.0.0-13
- Ensure that only the cron.hourly logrotate script exists if using
  the stock::log_server class.

* Fri Nov 01 2013 Trevor Vaughan <tvaughan@onyxpoint.com> - 4.0.0-12
- Added support to the stock server class for audispd.

* Mon Oct 07 2013 Kendall Moore <kmoore@keywcorp.com> - 4.0.0-11
- Updated all erb templates to properly scope variables.

* Thu Sep 19 2013 Nick Markowski <nmarkowski@keywcorp.com> - 4.0.0-10
- Allowed default syslog logrotate missingok

* Thu Jan 31 2013 Maintenance
4.0.0-9
- Created a Cucumber test to setup an rsyslog server from the rsyslog module.

* Wed Nov 28 2012 Maintenance
4.0.0-8
- Updated the global config to turn $PreserveFQDN on by default.

* Mon Oct 22 2012 Maintenance
4.0.0-7
- Added compat level for 5 by default.
- Updated the stock rules to dump slapd audit logs to their own file.

* Fri Aug 10 2012 Maintenance
4.0.0-6
- Update to set max open files ulimit to unlimited using the new init_ulimit
  type.
- Added some options to the stock server class to ensure that collected logs
  are reasonably rotated and stored.

* Tue Jul 24 2012 Maintenance
4.0.0-5
- Fix all instances of 'IPT:' instead of "IPT:"

* Wed Apr 11 2012 Maintenance
4.0.0-4
- Fixed bug regarding stunnel module.
- Moved mit-tests to /usr/share/simp...
- Updated pp files to better meet Puppet's recommended style guide.

* Fri Mar 02 2012 Maintenance
4.0.0-3
- Updated to ensure that sudosh output goes to its own log file.
- Improved test stubs.

* Tue Jan 17 2012 Maintenance
4.0.0-2
- Added a rule to allow all syslog connections past tcpwrappers. I know this
  isn't least privilege, but it's already being checked in two different
  places.

* Fri Dec 23 2011 Maintenance
4.0.0-1
- Updated the spec file to not require a separate file list.
- Changed all instances of 'ipaddress' to 'primary_ipaddress'.

* Mon Nov 07 2011 Maintenance
4.0.0-0
- Fixed call to rsyslog restart for RHEL6.

* Mon Oct 10 2011 Maintenance
2.0.0-3
- Updated to put quotes around everything that need it in a comparison
  statement so that puppet > 2.5 doesn't explode with an undef error.

* Tue Mar 29 2011 Maintenance - 2.0.0-2
- The 'onlyif' statement in concat_build was fixed to properly use
  /usr/bin/test.
- Modified the rsyslog rules to take apache into account.

* Fri Feb 11 2011 Maintenance - 2.0.0-1
- Changed all instances of defined(Class['foo']) to defined('foo') per the
  directions from the Puppet mailing list.
- Removed 'daemon.log' references which will make logrotate stop trying to
  rotate it and fail.
- Updated rsyslog::stock::log_server iptables rule
- Updated to use concat_build and concat_fragment types

* Tue Jan 11 2011 Maintenance
2.0.0-0
- Refactored for SIMP-2.0.0-alpha release
- Renamed puppet logs

* Fri Oct 29 2010 Maintenance - 1.0-3
- Replaced redundant rules with '& ~' which should improve performance.
- Moved the remote rsyslog security log rule into an 'if' that ensures that it
  is only activated when proper.
- Changed the module to call add_conf since those are loaded before the rest of
  the drop rules. Puppetmaster logs will now again flow to the remote log
  server.

* Tue Oct 26 2010 Maintenance - 1.0-2
- Converting all spec files to check for directories prior to copy.

* Thu Aug 05 2010 Maintenance
1.0-1
- rsyslog::log_server::allow was missing a '$' on the rhs of the udpServerAddress.

* Thu Jun 10 2010 Maintenance
1.0-0
- Removed data going to daemon.log by default. It was redundant with /var/log/messages.
- Full configuration of the daemon via /etc/sysconfig is now possible. Compatibility mode defaults to '3'.
- Added a new default log format with the priority included. Also provide for
  the capability to choose from one of the built-in rsyslog templates.
- Moved rsyslog::log_local and rsyslog::log_server to rsyslog::stock::log_local
  and rsyslog::stock::log_server respectively.
- Doc update and Code refactor.
- Fixed the default template by adding a '$' to the template entries.

* Wed May 12 2010 Maintenance
0.1-23
- Added a segment to remove the i386 version of rsyslog if you're on an
x86_64 system.

* Mon May 10 2010 Maintenance
0.1-22
- Now split puppet/puppetmaster logs into their own files on both the server
  and the client

* Tue Apr 27 2010 Maintenance
0.1-21
- Made the system require rsyslog.$architecture instead of rsyslog
- Fixed a bug in the rsyslog::server::allow define that would not let you
  properly set the udpServerAddress. It is now set to '0.0.0.0' by default.

* Wed Mar 17 2010 Maintenance
0.1-20
- Fixed a bug in the default server ruleset that was using '*' instead of '*.*'.

* Thu Jan 14 2010 Maintenance
0.1-19
- Allow users to set the maximum number of open files when configuring the
  rsyslog globals.

* Wed Jan 06 2010 Maintenance
0.1-18
- Now fork off iptables logs to /var/log/iptables.log.
- Added a logrotate rule for rotating the iptables log file.

* Wed Dec 30 2009 Maintenance
0.1-17
- Fixed a bug that did not allow the proper raising of max TCP sessions in
  rsyslog.

* Tue Dec 15 2009 Maintenance
0.1-16
- Fixed a bug that resulted in the daemon.log file not being rotated.
- Now ensure that the rsyslog server default configuration actually listens on
  all external ports by default instead of binding to localhost.
- Log server class now properly checks for ":IPT" instead of " :IPT"
- Log server class now sets lastaction instead of postrotate

* Wed Nov 04 2009 Maintenance
0.1-15
- Now call the new logrotate module to set up the log rotation job.

* Thu Oct 08 2009 Maintenance
0.1-14
- Modified the default 'secure' configurations to use verify = 2 by default.

* Tue Oct 06 2009 Maintenance
0.1-13
- Added a 'fail safe' mode to rsyslog so that it will never get an empty config
  file.
- Added pupmod-stunnel as a requirement.