From owner-freebsd-security@FreeBSD.ORG Wed Jul 19 19:20:38 2006 Return-Path: <owner-freebsd-security@FreeBSD.ORG> X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5453716A4E0 for <freebsd-security@freebsd.org>; Wed, 19 Jul 2006 19:20:38 +0000 (UTC) (envelope-from peterjeremy@optushome.com.au) Received: from mail17.syd.optusnet.com.au (mail17.syd.optusnet.com.au [211.29.132.198]) by mx1.FreeBSD.org (Postfix) with ESMTP id A6B3643D49 for <freebsd-security@freebsd.org>; Wed, 19 Jul 2006 19:20:37 +0000 (GMT) (envelope-from peterjeremy@optushome.com.au) Received: from turion.vk2pj.dyndns.org (c220-239-19-236.belrs4.nsw.optusnet.com.au [220.239.19.236]) by mail17.syd.optusnet.com.au (8.12.11/8.12.11) with ESMTP id k6JJKWrb007484 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Thu, 20 Jul 2006 05:20:34 +1000 Received: from turion.vk2pj.dyndns.org (localhost.vk2pj.dyndns.org [127.0.0.1]) by turion.vk2pj.dyndns.org (8.13.6/8.13.6) with ESMTP id k6JJKVK0003301; Thu, 20 Jul 2006 05:20:31 +1000 (EST) (envelope-from peter@turion.vk2pj.dyndns.org) Received: (from peter@localhost) by turion.vk2pj.dyndns.org (8.13.6/8.13.6/Submit) id k6JJKVce003300; Thu, 20 Jul 2006 05:20:31 +1000 (EST) (envelope-from peter) Date: Thu, 20 Jul 2006 05:20:31 +1000 From: Peter Jeremy <peterjeremy@optushome.com.au> To: George Mamalakis <mamalos@lan.gr> Message-ID: <20060719192031.GC733@turion.vk2pj.dyndns.org> References: <20060719114613.N18979@ns1.lan.gr> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="u65IjBhB3TIa72Vp" Content-Disposition: inline In-Reply-To: <20060719114613.N18979@ns1.lan.gr> X-PGP-Key: http://members.optusnet.com.au/peterjeremy/pubkey.asc User-Agent: Mutt/1.5.11 Cc: freebsd-security@freebsd.org Subject: Re: UDP connection attempts X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" <freebsd-security.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security> List-Post: <mailto:freebsd-security@freebsd.org> List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, <mailto:freebsd-security-request@freebsd.org?subject=subscribe> X-List-Received-Date: Wed, 19 Jul 2006 19:20:38 -0000 --u65IjBhB3TIa72Vp Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, 2006-Jul-19 12:07:08 +0300, George Mamalakis wrote: >In my security logs I keep on getting the following messages: >Jul 19 03:04:49 ns1 kernel: Connection attempt to UDP 127.0.0.1:512 from 1= 27.0.0.1:52291 As others have mentioned, this is sendmail trying to notify biff that the user has new mail but you aren't running biff. To stop it, add the following lines to your sendmail.mc file, rebuild sendmail.cf and restart sendmail: dnl Disable biff notification define(`LOCAL_MAILER_ARGS', `mail.local -Bl') --=20 Peter Jeremy --u65IjBhB3TIa72Vp Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (FreeBSD) iD8DBQFEvoX+/opHv/APuIcRAh26AJ4lLS+zJNKCh2iLvhMnckphMIategCdHJiJ x6g0391W5QYI4SdxNry9JAQ= =ShNR -----END PGP SIGNATURE----- --u65IjBhB3TIa72Vp--