From owner-freebsd-questions Wed Feb 25 20:41:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA08626 for freebsd-questions-outgoing; Wed, 25 Feb 1998 20:41:36 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from gdi.uoregon.edu (gdi.uoregon.edu [128.223.170.30]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA08532 for ; Wed, 25 Feb 1998 20:41:21 -0800 (PST) (envelope-from dwhite@gdi.uoregon.edu) Received: from localhost (dwhite@localhost) by gdi.uoregon.edu (8.8.7/8.8.8) with SMTP id UAA28677; Wed, 25 Feb 1998 20:41:16 -0800 (PST) (envelope-from dwhite@gdi.uoregon.edu) Date: Wed, 25 Feb 1998 20:41:16 -0800 (PST) From: Doug White Reply-To: Doug White To: bluemoon cc: questions@FreeBSD.ORG Subject: Re: security risk???? In-Reply-To: <3.0.5.32.19980225172249.007a0bb0@easyinternet.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 25 Feb 1998, bluemoon wrote: > hi > > I recently did a port scanning of my server as was quite surprised to find > the following: > > 513 login remote login a la telnet; > 514 cmd shell like exec, but automatic > > I have no idea what it is, where it is comming from and how i can turn it > off. Can someone help me out please? pine's imap insists on trying rsh first; if you have people on remote via pine they may be using that. Some could be using ssh too. Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message