Re: securing this workstation.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 2025-04-26 at 16:45 -0600, home user via users wrote:
> # netstat -ltuvpe
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address           Foreign Address 
> State       User       Inode      PID/Program name
> tcp        0      0 _localdnsproxy:domain   0.0.0.0:* LISTEN      systemd-resolve 8849       842/systemd-resolve
> tcp        0      0 0.0.0.0:llmnr           0.0.0.0:* LISTEN      systemd-resolve 8833       842/systemd-resolve
> tcp        0      0 localhost:ipp           0.0.0.0:* LISTEN      root       14421      1097/cupsd
> tcp        0      0 _localdnsstub:domain    0.0.0.0:* LISTEN      systemd-resolve 8847       842/systemd-resolve
> tcp6       0      0 [::]:llmnr              [::]:* LISTEN      systemd-resolve 8841       842/systemd-resolve
> tcp6       0      0 localhost:ipp           [::]:* LISTEN      root       14420      1097/cupsd
> udp        0      0 0.0.0.0:mdns            0.0.0.0:*         avahi      3950       905/avahi-daemon: r
> udp        0      0 0.0.0.0:llmnr           0.0.0.0:*         systemd-resolve 8832       842/systemd-resolve
> udp        0      0 _localdnsproxy:domain   0.0.0.0:*         systemd-resolve 8848       842/systemd-resolve
> udp        0      0 _localdnsstub:domain    0.0.0.0:*         systemd-resolve 8846       842/systemd-resolve
> udp        0      0 localhost:323           0.0.0.0:*         root       10105      1046/chronyd
> udp6       0      0 [::]:mdns               [::]:*         avahi      3951       905/avahi-daemon: r
> udp6       0      0 [::]:llmnr              [::]:*         systemd-resolve 8840       842/systemd-resolve
> udp6       0      0 localhost:323           [::]:*         root       10106      1046/chronyd
> udp6       0      0 c-76-25-2:dhcpv6-client [::]:*         root       38245      1029/NetworkManager
> #

As far as I know, the local CUPs (IPP) server only listens to 127.0.0.1
by default.  So that should be safe.  If you don't have a printer, and
never do the print to a PDF file thing, could stop the service.

I don't know about the security of Avahi.  And if you only have one
thing, your computer, connected to your ISP device, I don't think it
will be doing anything and you don't even need it running.

On the other hand, if your network is not just the single PC and your
ISPs modem/router/terminal-adapter/beige-box you may be using it.

If you have a printer that's network connected to the PC (as opposed to
USB, parallel, or serial), it may be being used.

If your ISP's beige-box has a configuration panel accessed via a web
brower, you may be using it as a simple way to find the device by a
name (like mygateway), rather than simply going to http://192.168.1.254
 (or whatever it is).

But I leave my Avahi daemon off, as a matter of one less thing to deal 
with when networking problems rear their had.  It can be quite
confusing when the network has become a not-work, yet the printer is
still there and working and PCs can do some things between themselves. 
But when the whole network goes kaput problem solving becomes much less
confusing.

In that case, it was something like the DNS/DHCP server being
unavailable, and other things carried on with cached results for a
while then fell back on link-local addresses which will only work
machine-to-machine within a LAN, with Avahi doing its thing.

-- 
 
uname -rsvp
Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 

-- 
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux