From owner-freebsd-security Mon Jul 13 10:54:17 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA04732 for freebsd-security-outgoing; Mon, 13 Jul 1998 10:54:17 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from inet.chipweb.ml.org (qmailr@c1003518-a.plstn1.sfba.home.com [24.1.82.47]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id KAA04722 for ; Mon, 13 Jul 1998 10:54:15 -0700 (PDT) (envelope-from ludwigp@bigfoot.com) Received: (qmail 20467 invoked from network); 13 Jul 1998 17:54:19 -0000 Received: from speedy.chipweb.ml.org (172.16.1.1) by inet.chipweb.ml.org with SMTP; 13 Jul 1998 17:54:19 -0000 Message-Id: <3.0.3.32.19980713104816.03203d78@mail.plstn1.sfba.home.com> X-Sender: ludwigp@mail.plstn1.sfba.home.com X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.3 (32) Date: Mon, 13 Jul 1998 10:48:16 -0700 To: Alexander Kandelaki , freebsd-security@FreeBSD.ORG From: Ludwig Pummer Subject: Re: Question... In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 04:24 PM 7/13/98 +0500, Alexander Kandelaki wrote: > >Hi all! > >Once I run netstat and received : > >tcp 0 0 access.pop3 ppp170-tc3.1658 TIME_WAIT >tcp 0 87 access.smtp egeo.unipg.it.4930 ESTABLISHED >tcp 0 169 access.smtp ARMINCO.COM.51685 ESTABLISHED >tcp 0 0 access.3314 192.168.1.2.smtp SYN_SENT > ^^^^^^^^^^^^^^^^ >tcp 0 0 access.smtp interfuture.com.3509 TIME_WAIT > >I haven't any proxy server installed on my system or something look like >it. Strange why in my system i see this IP ? What is it ? My guess is someone either a) has an incorrectly set firewall/proxy gateway system or b) is trying to hack/break your machine My guess is that it's b), since people who try to hack/break your machine try to hide who they are by spoofing their IP. --Ludwig Pummer ludwigp@bigfoot.com ICQ UIN: 692441 http://chipweb.home.ml.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message