From owner-freebsd-security  Mon May 18 13:09:14 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA19430
          for freebsd-security-outgoing; Mon, 18 May 1998 13:09:14 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from puck.nether.net (root@puck.nether.net [204.42.254.5])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA18928
          for <freebsd-security@freebsd.org>; Mon, 18 May 1998 13:07:50 -0700 (PDT)
          (envelope-from jared@puck.nether.net)
Received: (from jared@localhost) by puck.nether.net (8.9.0.Beta5/8.7.3) id PAA05756; Mon, 18 May 1998 15:13:39 -0400
Message-ID: <19980518151339.E3376@puck.nether.net>
Date: Mon, 18 May 1998 15:13:39 -0400
From: Jared Mauch <jared@puck.nether.net>
To: "J.A. Terranson" <sysadmin@mfn.org>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: hub.freebsd.org IDENT requests
References: <01BD824B.7FB9C100@w3svcs.mfn.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.91.1i
In-Reply-To: <01BD824B.7FB9C100@w3svcs.mfn.org>; from J.A. Terranson on Mon, May 18, 1998 at 10:55:38AM -0500
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk

	My favorite is this:

May 18 01:47:59 puck sendmail[26336]: NOQUEUE: Null connection from hub.FreeBSD.ORG [204.216.27.18]
May 18 09:02:21 puck sendmail[31482]: NOQUEUE: Null connection from hub.FreeBSD.ORG [204.216.27.18]

	I get these periodically.  The only way you get these is if
someone connects to your smtp port and then does a "QUIT" without
doing anything else.

	- Jared

On Mon, May 18, 1998 at 10:55:38AM -0500, J.A. Terranson wrote:
> * Cross posted to freebsd-security *
> 
> hub.freebsd.org (and *only* hub.freebsd.org!) attempts an IDENT
> sequence when talking to our mailservers - the port 113 kind. These
> are *always* rejected (but the mail still gets accepted [obviously]).
> 
> Why does your machine do this, i.e., what protocol is it trying
> to exec?  AFAIK, SMTP does not support 113 authentication (plz correct
> me if I am mistaken)
> 
> 
> Very Truly Yours,
> 
> J.A. Terranson
> sysadmin@mfn.org
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe security" in the body of the message

-- 
       Work: jared@qual.net - We Make The Internet Work for Your Business
	     9-5pm(ET) 800 637 4424x2634 - 24x7 NOC - 800 424 3223
	    pgp key available via finger from jared@puck.nether.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message