From owner-freebsd-security Sun Jul 23 15:41:12 2000 Delivered-To: freebsd-security@freebsd.org Received: from snafu.adept.org (adsl-63-201-63-44.dsl.snfc21.pacbell.net [63.201.63.44]) by hub.freebsd.org (Postfix) with ESMTP id C3B1137BADB for ; Sun, 23 Jul 2000 15:41:09 -0700 (PDT) (envelope-from mike@adept.org) Received: by snafu.adept.org (Postfix, from userid 1000) id A59929EE01; Sun, 23 Jul 2000 15:40:52 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by snafu.adept.org (Postfix) with ESMTP id 9D9679B001; Sun, 23 Jul 2000 15:40:52 -0700 (PDT) Date: Sun, 23 Jul 2000 15:40:52 -0700 (PDT) From: Mike Hoskins To: Stanley Hopcroft Cc: security@freebsd.org Subject: Re: What does this mean and how do I stop it ? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, 24 Jul 2000, Stanley Hopcroft wrote: > > Connection attempt to UDP 127.0.0.1:2343 from 127.0.0.1:53 > What do they mean and if they are not signs of bad things how can I get > rid of them ? DNS lookups. Do you, by chance, have net.inet.udp.log_in_vain=1? Setting it to 0 will do away with these - then use something like portsentry to monitor the ports you want to. -mrh To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message