From owner-freebsd-questions@FreeBSD.ORG Sun Jun 4 14:52:44 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E7B4216A57B for ; Sun, 4 Jun 2006 14:52:43 +0000 (UTC) (envelope-from exiaf_radar_guy38@yahoo.co.in) Received: from web8913.mail.in.yahoo.com (web8913.mail.in.yahoo.com [203.84.221.145]) by mx1.FreeBSD.org (Postfix) with SMTP id 16CCE43D45 for ; Sun, 4 Jun 2006 14:52:42 +0000 (GMT) (envelope-from exiaf_radar_guy38@yahoo.co.in) Received: (qmail 90862 invoked by uid 60001); 4 Jun 2006 14:52:40 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.in; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=EKOgy2lXr07m9CZWoIyaxwAiTUlUGDbRt7s/SnGE4XygAGCPi7WTTjumK7/Igk8y0xLdX6Nej7VJHSXCWDBsHnZt5dXwQ66/99nsy4SPf9RaXLo03u+8WGw/WRndTRXbpwyJbtZA1M6E+m1F8Ux/zrF34iMlt7i6rX4h/d/ExHU= ; Message-ID: <20060604145240.90860.qmail@web8913.mail.in.yahoo.com> Received: from [203.134.199.205] by web8913.mail.in.yahoo.com via HTTP; Sun, 04 Jun 2006 15:52:40 BST Date: Sun, 4 Jun 2006 15:52:40 +0100 (BST) From: dharam paul To: freebsd MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Subject: n00b question again X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Jun 2006 14:52:50 -0000 Hello to all, I was concerned about the security and bandwidth usage in my intranet. The netstat -anW command gives me following output: Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp4 0 0 192.168.1.14.22 192.168.1.10.1150 ESTABLISHED tcp4 0 0 192.168.1.14.49988 66.218.71.234.443 TIME_WAIT tcp4 0 0 192.168.1.14.56459 203.200.85.169.80 ESTABLISHED tcp4 0 0 192.168.1.14.58081 203.200.85.162.80 ESTABLISHED tcp4 0 0 192.168.1.14.61314 203.200.85.163.80 ESTABLISHED tcp4 0 0 192.168.1.14.61863 213.171.218.79.80 TIME_WAIT tcp4 0 0 192.168.1.14.56925 203.200.85.163.80 ESTABLISHED tcp4 0 0 *.8080 *.* LISTEN tcp4 0 0 127.0.0.1.59185 127.0.0.1.54912 ESTABLISHED tcp4 0 0 127.0.0.1.54912 127.0.0.1.59185 ESTABLISHED tcp4 0 0 127.0.0.1.50009 127.0.0.1.55820 ESTABLISHED tcp4 0 0 127.0.0.1.55820 127.0.0.1.50009 ESTABLISHED tcp4 0 0 127.0.0.1.62365 127.0.0.1.55311 ESTABLISHED tcp4 0 0 127.0.0.1.55311 127.0.0.1.62365 ESTABLISHED tcp4 0 0 127.0.0.1.61045 127.0.0.1.53667 ESTABLISHED tcp4 0 0 127.0.0.1.53667 127.0.0.1.61045 ESTABLISHED tcp4 0 0 127.0.0.1.54799 127.0.0.1.62139 ESTABLISHED tcp4 0 0 127.0.0.1.62139 127.0.0.1.54799 ESTABLISHED tcp4 0 0 *.139 *.* LISTEN tcp4 0 0 *.445 *.* LISTEN tcp4 0 0 *.22 *.* LISTEN tcp6 0 0 *.22 *.* LISTEN udp4 0 0 *.3401 *.* udp4 0 0 *.3130 *.* udp4 0 0 *.51191 *.* udp4 0 0 192.168.1.14.138 *.* udp4 0 0 192.168.1.14.137 *.* udp4 0 0 *.138 *.* udp4 0 0 *.137 *.* udp4 0 0 *.514 *.* udp6 0 0 *.514 *.* Active UNIX domain sockets Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr c17bc000 stream 0 0 c17bd108 0 0 0 /var/run/devd. pipe c17bbaf0 dgram 0 0 0 c17bbe38 0 0 c17bbc08 dgram 0 0 0 c17bbec4 0 0 c17bbe38 dgram 0 0 c17ad528 0 c17bbaf0 0 /var/run/logpr iv c17bbec4 dgram 0 0 c17ad630 0 c17bbc08 0 /var/run/log It can bee seen that yahoo servers have established contact with my NIC (192.168.1.14]. Why so? Is it valid? Or is Yahoo using my bandwidth? At least one of the foreign addresses that have established contact with my NIC is that of Yahoo? How do I avoid it? Please advise. TIA. Send instant messages to your online friends http://in.messenger.yahoo.com