[prev in list] [next in list] [prev in thread] [next in thread] 

List:       busybox
Subject:    RE: syslogd remote logs malformed
From:       "LASKY, ALEXANDER" <ALEX.LASKY () sydneywater ! com ! au>
Date:       2022-09-27 7:32:52
Message-ID: ebf43411161a4e6e817b37b2ad3a38eb () nt032pex13a ! ads ! swc
[Download RAW message or body]

[Attachment #2 (text/plain)]

Esteemed busybox developers:

When using syslogd for remote logging, our syslog server administrators complained \
(and I confirmed) that syslogd messages sent over the wire were not in accordance \
with RFC 3164 Section 4.1.2, specifically:  The HEADER part contains a timestamp and \
an indication of the  hostname or IP address of the device.

        […]

   The HOSTNAME field will contain only the hostname, the IPv4 address,

   or the IPv6 address of the originator of the message.  The preferred

   value is the hostname.

The hostname is currently not included in the header. This was not the case for local \
logging, which did include the hostname. When this was raised in 2008, Denys \
responded with Won't Fix, saying that Ubuntu did not include the hostname in its \
syslogd datagrams. I humbly ask you to reconsider whether Ubuntu bugs and \
configuration errors should take precedence over the RFC 😊. Also for remote \
logging, syslogd ignored /etc/syslog.conf.busybox, whereas for local logging the \
config file was effective. This leaves users unable to filter or despatch \
remotely-transmitted syslog messages by priority. There is nothing in the \
documentation or RFC that would lead you to expect this peculiar behaviour.

Looking at the the do_syslogd function within \
root<https://git.busybox.net/busybox/tree/?h=1_35_stable>/sysklogd<https://git.busybox \
.net/busybox/tree/sysklogd?h=1_35_stable>/syslogd.c<https://git.busybox.net/busybox/tree/sysklogd/syslogd.c?h=1_35_stable> \
at the section that handles remote logging, the cause becomes clear:

/* We are not modifying log messages in any way before send */

/* Remote site cannot trust _us_ anyway and need to do validation again */

This would be completely appropriate if the device was merely relaying \
correctly-formatted syslog messages that originated elsewhere, but not so appropriate \
for locally-originated syslog messages that lack the required hostname field. It is \
true that the remote site needs to do the validation again, but in our case the \
remote site is correctly indicating that the received packet is invalid. This section \
of the code also disregards /etc/syslog.conf.busybox, which explains why the file was \
ineffective at controlling remote logging.

I realise you all busy people, but can we please get this fixed at some stage so \
                that:
-Hostname is included in syslog messages as per RFC 3164; and
-The syslog server pays attention to /etc/syslog.conf.busybox for remotely logged \
messages as well as locally-logged ones, including support for the @remote_host \
action.

This should not require any drastic changes to the existing code. It would mostly \
entail moving the packet transmission code from do_syslog() to timestamp_and_log() \
within a conditional statement, plus a few more small changes to leave in the pri \
field and (preferably) blank the res field for the remotely-transmitted string. Plus \
a DNS lookup for any @remote_host actions in the config file.

Alex Lasky
SCADA Engineer
Digital – Op Technology



Desk (02) 8849 5924
Mobile 0419 115 169
Alex.Lasky@sydneywater.com.au<mailto:Alex.Lasky@sydneywater.com.au>
Level 2, 1 Smith Street
Parramatta NSW 2150



________________________________

[Facebook]<http://www.facebook.com/SydneyWater>  [Twitter] \
<http://twitter.com/sydneywaternews>   [YouTube] \
<http://www.youtube.com/user/sydneywatertv>   [Instagram] \
<http://www.instagram.com/explore/tags/sydneywater/>

________________________________

NOTICE: This email is confidential. If you are not the nominated recipient, please \
immediately delete this email, destroy all copies and inform the sender. Sydney Water \
Corporation (Sydney Water) prohibits the unauthorised copying or distribution of this \
email. This email does not necessarily express the views of Sydney Water. Sydney \
Water does not warrant nor guarantee that this email communication is free from \
errors, virus, interception or interference.

________________________________


[Attachment #3 (text/html)]

<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:x="urn:schemas-microsoft-com:office:excel" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"> <head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"Segoe UI Emoji";
	panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
code
	{mso-style-priority:99;
	font-family:"Courier New";}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:"Courier New";
	mso-fareast-language:EN-AU;}
span.EmailStyle22
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><a name="_Hlk527538452"></a><a name="_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">Esteemed busybox \
developers:<o:p></o:p></span></a></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><o:p>&nbsp;</o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">When using syslogd for remote logging, our syslog \
server administrators complained (and I confirmed) that syslogd messages sent over \
the wire were not in accordance  with RFC 3164 Section 4.1.2, \
specifically:<o:p></o:p></span></span></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Courier \
New&quot;;color:black;mso-fareast-language:EN-AU">&nbsp;&nbsp; The HEADER part \
contains a timestamp and an indication of  the<o:p></o:p></span></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Courier \
New&quot;;color:black;mso-fareast-language:EN-AU">&nbsp;&nbsp; hostname or IP address \
of the device.<o:p></o:p></span></span></span></p> <pre><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="color:black">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
[…]<o:p></o:p></span></span></span></pre> <pre><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="color:black">&nbsp;&nbsp; The HOSTNAME field will contain only the hostname, \
the IPv4 address,<o:p></o:p></span></span></span></pre> <pre><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="color:black">&nbsp;&nbsp; or the IPv6 address of the originator of the \
message.&nbsp; The preferred<o:p></o:p></span></span></span></pre> <pre><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="color:black">&nbsp;&nbsp; value is the hostname. \
<o:p></o:p></span></span></span></pre> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><o:p>&nbsp;</o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">The hostname is currently not included in the \
header. This was not the case for local logging, which did include the hostname. When \
this was raised in 2008,  Denys responded with Won't Fix, saying that Ubuntu did not \
include the hostname in its syslogd datagrams. I humbly ask you to reconsider whether \
Ubuntu bugs and configuration errors should take precedence over the RFC \
</span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span style="font-family:&quot;Segoe UI \
Emoji&quot;,sans-serif">&#128522;</span>. Also for remote logging, syslogd ignored \
</span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span style="font-family:&quot;Courier \
New&quot;">/etc/syslog.conf.busybox</span>, whereas for local logging the config file \
was effective. This leaves users unable to filter  or despatch remotely-transmitted \
syslog messages by priority. There is nothing in the documentation or RFC that would \
lead you to expect this peculiar behaviour.<o:p></o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><o:p>&nbsp;</o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">Looking at the the </span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Courier New&quot;">do_syslogd</span> \
function within </span></span><a \
href="https://git.busybox.net/busybox/tree/?h=1_35_stable"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;text-decoration:none">root</span></span></span><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span></a><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:black;background:#EEEEEE">/</span></span></span><a \
href="https://git.busybox.net/busybox/tree/sysklogd?h=1_35_stable"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;text-decoration:none">sysklogd</span></span></span><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span></a><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:black;background:#EEEEEE">/</span></span></span><a \
href="https://git.busybox.net/busybox/tree/sysklogd/syslogd.c?h=1_35_stable"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;text-decoration:none">syslogd.c</span></span></span><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span></a><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452">  at the \
section that handles remote logging, the cause becomes \
clear:<o:p></o:p></span></span></p> <pre style="background:white"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><code><span style="color:black">/* We are not \
modifying log messages in any way before send \
*/<o:p></o:p></span></code></span></span></pre> <pre style="background:white"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><code><span style="color:black">/* Remote site \
cannot trust _us_ anyway and need to do validation again \
*/</span></code><o:p></o:p></span></span></pre> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><o:p>&nbsp;</o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">This would be completely appropriate if the device \
was merely relaying correctly-formatted syslog messages that originated elsewhere, \
but not so appropriate  for locally-originated syslog messages that lack the required \
hostname field. It is true that the remote site needs to do the validation again, but \
in our case the remote site is correctly indicating that the received packet is \
invalid. This section of the  code also disregards </span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-family:&quot;Courier New&quot;">/etc/syslog.conf.busybox</span>, which \
explains why the file was ineffective at controlling remote \
logging.<o:p></o:p></span></span></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><o:p>&nbsp;</o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">I realise you all busy people, but can we please \
get this fixed at some stage so that:<o:p></o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">-Hostname is included in syslog messages as per \
RFC 3164; and<o:p></o:p></span></span></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452">-The \
syslog server pays attention to </span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-family:&quot;Courier New&quot;">/etc/syslog.conf.busybox</span> for \
remotely logged messages as well as locally-logged ones, including support for the \
</span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span style="font-family:&quot;Courier \
New&quot;">@remote_host</span> action.<o:p></o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><o:p>&nbsp;</o:p></span></span></p> <p \
class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452">This should not require any drastic changes to the \
existing code. It would mostly entail moving the packet transmission code from \
</span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span style="font-family:&quot;Courier \
New&quot;">do_syslog()</span> to </span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-family:&quot;Courier New&quot;">timestamp_and_log()</span> within a \
conditional statement, plus a few more small changes to leave in the \
</span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span style="font-family:&quot;Courier \
New&quot;">pri</span> field and (preferably) blank the </span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-family:&quot;Courier New&quot;">res</span> field for the \
remotely-transmitted string. Plus a DNS lookup for any </span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-family:&quot;Courier New&quot;">@remote_host</span> actions in the config \
file.<o:p></o:p></span></span></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><o:p>&nbsp;</o:p></span></span></p> <table \
class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" \
style="background:white;border-collapse:collapse"> <tbody>
<tr>
<td width="302" style="width:226.5pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><b><span \
style="font-size:12.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#00259B">Alex \
Lasky <o:p></o:p></span></b></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#00259B">SCADA \
Engineer<o:p></o:p></span></span></span></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#2BACCC">Digital \
– Op Technology</span></span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#252524"><o:p></o:p></span></span></span></p>
 </td>
<span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> <td width="180" \
style="width:134.7pt;padding:0cm 0cm 0cm 0cm"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><b><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#00259B"><o:p>&nbsp;</o:p></span></b></span></span></p>
 </td>
<span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> </tr>
<tr>
<td width="302" style="width:226.5pt;padding:0cm 0cm 0cm 0cm"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#252524"><o:p>&nbsp;</o:p></span></span></span></p>
 </td>
<span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> <td width="180" valign="top" \
style="width:134.7pt;padding:0cm 0cm 0cm 0cm"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#252524"><o:p>&nbsp;</o:p></span></span></span></p>
 </td>
<span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> </tr>
<tr>
<td width="302" valign="top" style="width:226.5pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><b><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#00259B">Desk</span></b></span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#00259B"> \
</span></span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#252524">(02) \
8849 5924<o:p></o:p></span></span></span></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><b><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#00259B">Mobile</span></b></span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#00259B"> \
</span></span></span><span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#252524">0419 \
115 169<o:p></o:p></span></span></span></p> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span><a \
href="mailto:Alex.Lasky@sydneywater.com.au"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif">Alex.Lasky@sydneywater.com.au</span></span></span><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span></a><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#2BACCC"><o:p></o:p></span></span></span></p>
 </td>
<span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> <td width="180" valign="top" \
style="width:134.7pt;padding:0cm 0cm 0cm 0cm"> <p class="MsoNormal"><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#252524">Level \
2, 1 Smith Street<br> Parramatta NSW 2150</span></span></span><span \
style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span><span \
style="mso-bookmark:_Hlk83372425"><span style="mso-bookmark:_Hlk527538452"><span \
style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif"><o:p></o:p></span></span></span></p>
 </td>
<span style="mso-bookmark:_Hlk83372425"><span \
style="mso-bookmark:_Hlk527538452"></span></span> </tr>
</tbody>
</table>
<span style="mso-bookmark:_Hlk527538452"></span><span \
style="mso-bookmark:_Hlk83372425"></span> <p class="MsoNormal"><span \
style="mso-fareast-language:EN-AU"><o:p>&nbsp;</o:p></span></p> <p \
class="MsoNormal"><o:p>&nbsp;</o:p></p> </div>
<p></p>
<div class="MsoNormal" align="center" style="text-align: center;">
<hr size="2" width="100%" align="center">
</div>
<p><span style="font-family: 'Arial','sans-serif';"><a \
href="http://www.facebook.com/SydneyWater" target="_blank" title="Connect on \
Facebook" rel="noopener"><span style="text-decoration: none; text-underline: \
none;"><img border="0" id="facebook" \
src="https://sydneywater.com.au/content/dam/sydneywater/icons/Facebook-default.svg" \
alt="Facebook"></span></a>&nbsp; <a href="http://twitter.com/sydneywaternews" \
target="_blank" title="Follow sydneywaternews on Twitter" rel="noopener"> <span \
style="text-decoration: none; text-underline: none;"><img border="0" id="twitter" \
src="https://sydneywater.com.au/content/dam/sydneywater/icons/Twitter-default.svg" \
alt="Twitter"></span></a>&nbsp; <a href="http://www.youtube.com/user/sydneywatertv" \
target="_blank" title="Subscribe to sydneywatertv's channel on YouTube" \
rel="noopener"> <span style="text-decoration: none; text-underline: none;"><img \
border="0" id="youtube" \
src="https://www.sydneywater.com.au/content/dam/sydneywater/icons/Youtube-default.svg" \
alt="YouTube"></span></a>&nbsp; <a \
href="http://www.instagram.com/explore/tags/sydneywater/" target="_blank" \
title="Subscribe to Instagram" rel="noopener"> <span style="text-decoration: none; \
text-underline: none;"><img border="0" id="instagram" \
src="https://www.sydneywater.com.au/content/dam/sydneywater/icons/Instagram-default.svg" \
alt="Instagram"></span></a> </span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span \
style="font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;mso-fareast-font-family:&quot;Times \
New Roman&quot;"> <hr size="2" width="100%" align="center">
</span></div>
<p><span style="font-family:&quot;Arial&quot;,&quot;sans-serif&quot;">NOTICE: This \
email is confidential. If you are not the nominated recipient, please immediately \
delete this email, destroy all copies and inform the sender. Sydney Water Corporation \
(Sydney Water) prohibits the  unauthorised copying or distribution of this email. \
This email does not necessarily express the views of Sydney Water. Sydney Water does \
not warrant nor guarantee that this email communication is free from errors, virus, \
interception or interference.</span></p> <div class="MsoNormal" align="center" \
style="text-align:center"><span \
style="font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;mso-fareast-font-family:&quot;Times \
New Roman&quot;"> <hr size="2" width="100%" align="center">
</span></div>
</body>
</html>



_______________________________________________
busybox mailing list
busybox@busybox.net
http://lists.busybox.net/mailman/listinfo/busybox

--===============5572297310103764044==--

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic