Mailing List Archive: rsyslog tries to open network socket when (re)started

Hello,

every time I restart rsyslog, it tries to open network socket on my main
interface eth0 and on 127.0.1.1

I assume this is to resolve my hostname ?

I have added all IPs to /etc/hosts, so that rsyslog does not need to
resolve any hostnames

127.0.0.1 localhost
127.0.1.1 myhost
1.2.3.4 myhost # eth0

10.1.1.1 myhost-v1 # eth1
10.1.2.1 myhost-v2 # eth2

where 1.2.3.4 is substituted for my real IP.

I have my reasons why this bothers me, by I think these are not relevant
to this discussion. I can explain in more detail if necessary.

Q: can I tell rsyslog to not use network sockets at all, and only act as
local daemon?

I also have "$PreserveFQDN on" in my /etc/rsyslog.conf

many thanks,
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

Digging through the sources it seems that rsyslogd firstly runs
gethostbyname(). Then checks if it's not empty and has dots (in other
words - checks if we have FQDN of local machine). And if it's not an
FQDN, unless you set net.enableDNS=off (or run rsyslogd with -x, but
that option is to be deprecated, judging from the sources), tries to -
quoting the comment from source "find the real name via resolver".

Ekspert ds. Bezpiecze?stwa IT
COMP S.A.
Pion Cyberbezpiecze?stwa i Zarz?dzania Ryzykiem
e-mail: mariusz.kruk@comp.com.pl
e-mail: mariusz.kruk@safecomp.com
tel: +48 608 623 299

On 04.10.2020 07:45, Fourhundred Thecat via rsyslog wrote:
> Hello,
>
> every time I restart rsyslog, it tries to open network socket on my main
> interface eth0 and on 127.0.1.1
>
> I assume this is to resolve my hostname ?
>
> I have added all IPs to /etc/hosts, so that rsyslog does not need to
> resolve any hostnames
>
> 127.0.0.1    localhost
> 127.0.1.1    myhost
> 1.2.3.4        myhost        # eth0
>
> 10.1.1.1    myhost-v1    # eth1
> 10.1.2.1    myhost-v2    # eth2
>
> where 1.2.3.4 is substituted for my real IP.
>
> I have my reasons why this bothers me, by I think these are not relevant
> to this discussion. I can explain in more detail if necessary.
>
> Q: can I tell rsyslog to not use network sockets at all, and only act as
> local daemon?
>
> I also have "$PreserveFQDN on" in my /etc/rsyslog.conf
>
> many thanks,
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
> if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.