I am not using any filter it set to none.
the RFC 3164 doesn't work at all and agian i seem to get only test messages and not the actual logs.
When i test the "forward to host" i get this:
<191>Original Address=192.168.0.1 This is a test message from Kiwi Syslog Server