From owner-freebsd-security  Mon Jul 20 16:33:51 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id QAA15838
          for freebsd-security-outgoing; Mon, 20 Jul 1998 16:33:51 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from shell6.ba.best.com (jkb@shell6.ba.best.com [206.184.139.137])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA15804
          for <security@freebsd.org>; Mon, 20 Jul 1998 16:33:45 -0700 (PDT)
          (envelope-from jkb@best.com)
Received: from localhost (jkb@localhost)
	by shell6.ba.best.com (8.9.0/8.9.0/best.sh) with SMTP id QAA19691
	for <security@freebsd.org>; Mon, 20 Jul 1998 16:33:29 -0700 (PDT)
X-Authentication-Warning: shell6.ba.best.com: jkb owned process doing -bs
Date: Mon, 20 Jul 1998 16:33:28 -0700 (PDT)
From: "Jan B. Koum " <jkb@best.com>
X-Sender: jkb@shell6.ba.best.com
To: security@FreeBSD.ORG
Subject: Re: unwanted packets in secure mode?
In-Reply-To: <Pine.BSF.3.96.980720153403.7192H-100000@shell6.ba.best.com>
Message-ID: <Pine.BSF.3.96.980720162854.18806B-100000@shell6.ba.best.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


        Never mind .. I am a retard .. I forgot my syslogd is
running with "-s" switch. In syslogd.c we have:

                                if (!(Vogons & (Vogons - 1))) {
                                        (void)snprintf(line, sizeof line,
"syslogd: discarded %d unwanted packets in secure mode", Vogons);
                                        logmsg(LOG_SYSLOG|LOG_AUTH, line,
                                            LocalHostName, ADDDATE);

	Does it make sence to actually add an IP of a server trying to
send us syslogd packets? Maybe something like:
"syslogd: discarded %d unwanted packets in secure mode form %s"

-- Yan

Jan Koum                  jkb@best.com |  "Turn up the lights; I don't want
www.FreeBSD.org --  The Power to Serve |   to go home in the dark."

On Mon, 20 Jul 1998, Jan B. Koum  wrote:

>
>Message from syslogd@0wn at Tue Jul 21 10:52:35 1998 ...
>0wn syslogd: discarded 2 unwanted packets in secure mode
>
>Message from syslogd@0wn at Tue Jul 21 11:03:16 1998 ...
>0wn syslogd: discarded 4 unwanted packets in secure mode
>
>Message from syslogd@0wn at Tue Jul 21 11:04:01 1998 ...
>0wn syslogd: discarded 8 unwanted packets in secure mode
>
>
>
>	Anyone might know where this is coming from? Thanks,
>
>-- Yan
>
>Jan Koum                  jkb@best.com |  "Turn up the lights; I don't want
>www.FreeBSD.org --  The Power to Serve |   to go home in the dark."
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message