Digging through the sources it seems that rsyslogd firstly runs
gethostbyname(). Then checks if it's not empty and has dots (in other
words - checks if we have FQDN of local machine). And if it's not an
FQDN, unless you set net.enableDNS=off (or run rsyslogd with -x, but
that option is to be deprecated, judging from the sources), tries to -
quoting the comment from source "find the real name via resolver".
Ekspert ds. Bezpieczeństwa IT
COMP S.A.
Pion Cyberbezpieczeństwa i Zarządzania Ryzykiem
e-mail: [email protected]
e-mail: [email protected]
tel: +48 608 623 299
On 04.10.2020 07:45, Fourhundred Thecat via rsyslog wrote:
Hello,
every time I restart rsyslog, it tries to open network socket on my main
interface eth0 and on 127.0.1.1
I assume this is to resolve my hostname ?
I have added all IPs to /etc/hosts, so that rsyslog does not need to
resolve any hostnames
127.0.0.1 localhost
127.0.1.1 myhost
1.2.3.4 myhost # eth0
10.1.1.1 myhost-v1 # eth1
10.1.2.1 myhost-v2 # eth2
where 1.2.3.4 is substituted for my real IP.
I have my reasons why this bothers me, by I think these are not relevant
to this discussion. I can explain in more detail if necessary.
Q: can I tell rsyslog to not use network sockets at all, and only act as
local daemon?
I also have "$PreserveFQDN on" in my /etc/rsyslog.conf
many thanks,
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
