On Sat, 2025-04-26 at 16:45 -0600, home user via users wrote: > # netstat -ltuvpe > Active Internet connections (only servers) > Proto Recv-Q Send-Q Local Address Foreign Address > State User Inode PID/Program name > tcp 0 0 _localdnsproxy:domain 0.0.0.0:* LISTEN > systemd-resolve 8849 842/systemd-resolve > tcp 0 0 0.0.0.0:llmnr 0.0.0.0:* LISTEN > systemd-resolve 8833 842/systemd-resolve > tcp 0 0 localhost:ipp 0.0.0.0:* LISTEN root > 14421 1097/cupsd > tcp 0 0 _localdnsstub:domain 0.0.0.0:* LISTEN > systemd-resolve 8847 842/systemd-resolve > tcp6 0 0 [::]:llmnr [::]:* LISTEN > systemd-resolve 8841 842/systemd-resolve > tcp6 0 0 localhost:ipp [::]:* LISTEN root > 14420 1097/cupsd > udp 0 0 0.0.0.0:mdns 0.0.0.0:* avahi 3950 > 905/avahi-daemon: r > udp 0 0 0.0.0.0:llmnr 0.0.0.0:* systemd-resolve > 8832 842/systemd-resolve > udp 0 0 _localdnsproxy:domain 0.0.0.0:* systemd-resolve > 8848 842/systemd-resolve > udp 0 0 _localdnsstub:domain 0.0.0.0:* systemd-resolve > 8846 842/systemd-resolve > udp 0 0 localhost:323 0.0.0.0:* root > 10105 1046/chronyd > udp6 0 0 [::]:mdns [::]:* avahi 3951 > 905/avahi-daemon: r > udp6 0 0 [::]:llmnr [::]:* systemd-resolve > 8840 842/systemd-resolve > udp6 0 0 localhost:323 [::]:* root 10106 > 1046/chronyd > udp6 0 0 c-76-25-2:dhcpv6-client [::]:* root 38245 > 1029/NetworkManager > #
As far as I know, the local CUPs (IPP) server only listens to 127.0.0.1 by default. So that should be safe. If you don't have a printer, and never do the print to a PDF file thing, could stop the service. I don't know about the security of Avahi. And if you only have one thing, your computer, connected to your ISP device, I don't think it will be doing anything and you don't even need it running. On the other hand, if your network is not just the single PC and your ISPs modem/router/terminal-adapter/beige-box you may be using it. If you have a printer that's network connected to the PC (as opposed to USB, parallel, or serial), it may be being used. If your ISP's beige-box has a configuration panel accessed via a web brower, you may be using it as a simple way to find the device by a name (like mygateway), rather than simply going to http://192.168.1.254 (or whatever it is). But I leave my Avahi daemon off, as a matter of one less thing to deal with when networking problems rear their had. It can be quite confusing when the network has become a not-work, yet the printer is still there and working and PCs can do some things between themselves. But when the whole network goes kaput problem solving becomes much less confusing. In that case, it was something like the DNS/DHCP server being unavailable, and other things carried on with cached results for a while then fell back on link-local addresses which will only work machine-to-machine within a LAN, with Avahi doing its thing. -- uname -rsvp Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 Boilerplate: All unexpected mail to my mailbox is automatically deleted. I will only get to see the messages that are posted to the mailing list. -- _______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
