From owner-freebsd-security@FreeBSD.ORG  Wed Jul 19 19:20:38 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5453716A4E0
	for <freebsd-security@freebsd.org>;
	Wed, 19 Jul 2006 19:20:38 +0000 (UTC)
	(envelope-from peterjeremy@optushome.com.au)
Received: from mail17.syd.optusnet.com.au (mail17.syd.optusnet.com.au
	[211.29.132.198])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A6B3643D49
	for <freebsd-security@freebsd.org>;
	Wed, 19 Jul 2006 19:20:37 +0000 (GMT)
	(envelope-from peterjeremy@optushome.com.au)
Received: from turion.vk2pj.dyndns.org
	(c220-239-19-236.belrs4.nsw.optusnet.com.au [220.239.19.236])
	by mail17.syd.optusnet.com.au (8.12.11/8.12.11) with ESMTP id
	k6JJKWrb007484
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Thu, 20 Jul 2006 05:20:34 +1000
Received: from turion.vk2pj.dyndns.org (localhost.vk2pj.dyndns.org [127.0.0.1])
	by turion.vk2pj.dyndns.org (8.13.6/8.13.6) with ESMTP id k6JJKVK0003301;
	Thu, 20 Jul 2006 05:20:31 +1000 (EST)
	(envelope-from peter@turion.vk2pj.dyndns.org)
Received: (from peter@localhost)
	by turion.vk2pj.dyndns.org (8.13.6/8.13.6/Submit) id k6JJKVce003300;
	Thu, 20 Jul 2006 05:20:31 +1000 (EST) (envelope-from peter)
Date: Thu, 20 Jul 2006 05:20:31 +1000
From: Peter Jeremy <peterjeremy@optushome.com.au>
To: George Mamalakis <mamalos@lan.gr>
Message-ID: <20060719192031.GC733@turion.vk2pj.dyndns.org>
References: <20060719114613.N18979@ns1.lan.gr>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="u65IjBhB3TIa72Vp"
Content-Disposition: inline
In-Reply-To: <20060719114613.N18979@ns1.lan.gr>
X-PGP-Key: http://members.optusnet.com.au/peterjeremy/pubkey.asc
User-Agent: Mutt/1.5.11
Cc: freebsd-security@freebsd.org
Subject: Re: UDP connection attempts
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Jul 2006 19:20:38 -0000


--u65IjBhB3TIa72Vp
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, 2006-Jul-19 12:07:08 +0300, George Mamalakis wrote:
>In my security logs I keep on getting the following messages:
>Jul 19 03:04:49 ns1 kernel: Connection attempt to UDP 127.0.0.1:512 from 1=
27.0.0.1:52291

As others have mentioned, this is sendmail trying to notify biff that
the user has new mail but you aren't running biff.  To stop it, add
the following lines to your sendmail.mc file, rebuild sendmail.cf and
restart sendmail:

dnl Disable biff notification
define(`LOCAL_MAILER_ARGS', `mail.local -Bl')

--=20
Peter Jeremy

--u65IjBhB3TIa72Vp
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (FreeBSD)

iD8DBQFEvoX+/opHv/APuIcRAh26AJ4lLS+zJNKCh2iLvhMnckphMIategCdHJiJ
x6g0391W5QYI4SdxNry9JAQ=
=ShNR
-----END PGP SIGNATURE-----

--u65IjBhB3TIa72Vp--