From owner-freebsd-questions Thu Nov 2 6:43:59 2000 Delivered-To: freebsd-questions@freebsd.org Received: from nets5.rz.rwth-aachen.de (nets5.rz.RWTH-Aachen.DE [137.226.144.13]) by hub.freebsd.org (Postfix) with ESMTP id 333D437B4CF for ; Thu, 2 Nov 2000 06:43:56 -0800 (PST) Received: from hyperion.informatik.rwth-aachen.de (hyperion.Informatik.RWTH-Aachen.DE [137.226.112.212]) by nets5.rz.rwth-aachen.de (8.10.1/8.10.1/7) with ESMTP id eA2Ehrm07873; Thu, 2 Nov 2000 15:43:53 +0100 (MET) Received: from agamemnon.informatik.rwth-aachen.de (agamemnon.Informatik.RWTH-Aachen.DE [137.226.194.74]) by hyperion.informatik.rwth-aachen.de (8.9.1b+Sun/8.9.1/2) with ESMTP id PAA09272; Thu, 2 Nov 2000 15:43:28 +0100 (MET) Received: (from stolz@localhost) by agamemnon.informatik.rwth-aachen.de (8.9.1b+Sun/8.9.1-gb-2) id PAA02977; Thu, 2 Nov 2000 15:43:51 +0100 (MET) Date: Thu, 2 Nov 2000 15:43:51 +0100 From: Volker Stolz To: peter kok Cc: freebsd-questions@FreeBSD.ORG Subject: Re: message from log Message-ID: <20001102154351.C2687@agamemnon.informatik.rwth-aachen.de> Mail-Followup-To: Volker Stolz , peter kok , freebsd-questions@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from aoypcc@hotmail.com on Thu, Nov 02, 2000 at 02:20:13PM +0000 Organization: Chair for CS II 1/2, Anomalous Programming Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Am 02. Nov 2000 um 15:20 MET schrieb peter kok: > >Nov 2 15:46:15 mail portmap[10361]: connect from 203.248.127.18 to > > >dump(): request from unauthorized host Someone scanned your portmapper, mostly to find a broken rpc.statd to break into your box, but luckily you're running tcp_wrapper who disconnected the intruder. Of course there's more than one way to get this message, but this is the most probable explanation. From 'man portmap': "Portmap uses hosts_access(5) access control by default." -- Volker Stolz * stolz@i2.informatik.rwth-aachen.de * PGP + S/MIME To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message