Your message dated Tue, 28 May 2024 00:03:32 +0100 with message-id <CAJ3BuoQwYaZSNy_fFrUm6eL2q9oA0Nu0MnFv9k7uP=zvy9q...@mail.gmail.com> and subject line Re: avahi-daemon rule has caused the Debian Bug report #621373, regarding avahi-daemon rule to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 621373: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621373 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: logcheck Hi, I created a rule to clean up some cruft avahi-daemon was leaving in my server logcheck. Create the file avahi-daemon in /etc/logcheck/ignore.d.server/ and add the following.... \w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: Invalid query packet.$ \w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: last message repeated [[:digit:]] times$ Just wanted to share that with others as I had to create it. I also posted on my blog at www.geeksedition.com Cheers, //Ian\\ -- ____________________________________________________ Ian Langdon, Linux Systems Administrator - Trapeze www.trapeze.com - 416.601.1999 x327
--- End Message ---
--- Begin Message ---On Wed, 6 Apr 2011 19:06:20 -0400 "Jeremy L. Gaddis" <[email protected]> wrote: > Ian Langdon <[email protected]> wrote: > > \w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: Invalid query > > packet.$ > > \w{3} [ :0-9]{11} [._[:alnum:]-]+ avahi-daemon\[[0-9]+\]: last message > > repeated [[:digit:]] times$ > > Second rule should probably be "[[:digit:]]+": > > "last message repeated 9 times" would match, but "last message repeated > 10 times" wouldn't. Neither of the above rules should be included in the avahi rules by debian. the first one looks suspicious and is exactly what you want logcheck to be telling you about -- if someone is sending invalid packets via mDNS you probaby want a better firewall setting. The "last message repeated" is an old syslog issue and is no longer produced - it's nothing to do with avahi per se therefore, I'm closing this particular bug for that reason. (I'm working on updated rules for avahi, which do need an update, but this bug is not helpful for that)
--- End Message ---
