[TriLUG] secure syslog server

[Greg Brown]

I have to set up a syslog server for my Internet routers.  The server
will be on the Internet 24x7 and obviously I'd like to restrict
access.  What comes to mind is allowing ssh inbound from any host
while filtering syslog from specific MAC addresses.  Does this sound
reasonable?  I would prefer to use Linux but I am open to using any
flavor of BSD.

Has anyone set up a server to perform this function?  What steps did
you take to secure the box?

Greg