From owner-freebsd-bugs@FreeBSD.ORG Tue Aug 19 10:48:27 2014 Return-Path: Delivered-To: freebsd-bugs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0280D41F for ; Tue, 19 Aug 2014 10:48:27 +0000 (UTC) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C4FA93BDB for ; Tue, 19 Aug 2014 10:48:26 +0000 (UTC) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.14.9/8.14.9) with ESMTP id s7JAmQV5032837 for ; Tue, 19 Aug 2014 10:48:26 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 192827] New: `syslogd -s` listens on 514/udp6 Date: Tue, 19 Aug 2014 10:48:26 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: 10.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: florian.ermisch@alumni.tu-berlin.de X-Bugzilla-Status: Needs Triage X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Aug 2014 10:48:27 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192827 Bug ID: 192827 Summary: `syslogd -s` listens on 514/udp6 Product: Base System Version: 10.0-RELEASE Hardware: amd64 OS: Any Status: Needs Triage Severity: Affects Some People Priority: --- Component: bin Assignee: freebsd-bugs@FreeBSD.org Reporter: florian.ermisch@alumni.tu-berlin.de We got a server running 10.0-RELEASE-p7 with rsyslogd (installed via pkg) to receive logs via TCP. As rsyslogd failed to log local messages I've disabled local logging by rsyslogd and re-enabled syslogd in rc.conf adding '-s' to the flags b/c the manpages states: -s Operate in secure mode. Do not log messages from remote machines. If specified twice, no network socket will be opened at all, which also disables logging to remote machines. user@sysloghost:~% grep syslog /etc/rc.conf hostname="sysloghost.domain.tld" syslogd_enable="YES" syslogd_flags="-s -v -v" rsyslogd_enable="YES" A few hours ago I checked on rsyslogd b/c of some monitoring glitch, ran `sockstat(1)` and was suprised seeing syslogd listening on 514/udp6: user@sysloghost:~% sockstat | grep syslog root syslogd 68516 4 dgram /var/run/log root syslogd 68516 5 dgram /var/run/logpriv root syslogd 68516 6 udp6 *:514 *:* <========= root rsyslogd 25668 0 udp4 *:514 *:* root rsyslogd 25668 1 tcp4 ${SYSLOG_IP}:514 ${SYSLOG_CL1}:47563 root rsyslogd 25668 3 tcp6 *:514 *:* root rsyslogd 25668 4 tcp4 *:514 *:* root rsyslogd 25668 5 tcp4 ${SYSLOG_IP}:514 ${SYSLOG_CL2}:41922 root rsyslogd 25668 7 tcp4 ${SYSLOG_IP}:514 ${SYSLOG_CL3}:48601 root rsyslogd 25668 9 tcp4 ${SYSLOG_IP}:514 ${SYSLOG_CL4}:60310 Right now that's no problem for us as the setup is currently IPv4 only but clearly isn't what the manpage states and might cause problems in a similar setup with IPv6. -- You are receiving this mail because: You are the assignee for the bug.