From owner-freebsd-questions@FreeBSD.ORG  Wed Feb  2 17:01:50 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BC6D916A4CE
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 17:01:50 +0000 (GMT)
Received: from brightstar.bomgardner.net (brightstar.bomgardner.net
	[209.240.79.79])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5240A43D5A
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 17:01:50 +0000 (GMT)
	(envelope-from listmail@Bomgardner.net)
Received: from [192.168.0.2] (morningstar [192.168.0.2])
	by brightstar.bomgardner.net (Postfix) with ESMTP id C9BF821D865
	for <freebsd-questions@freebsd.org>;
	Wed,  2 Feb 2005 11:02:07 -0600 (CST)
Message-ID: <42010776.2050908@Bomgardner.net>
Date: Wed, 02 Feb 2005 11:01:42 -0600
From: Gene <listmail@Bomgardner.net>
User-Agent: Mozilla Thunderbird 0.6 (Windows/20040502)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: "freebsd-questions@FreeBSD. ORG" <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Strange foreign connections
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Feb 2005 17:01:50 -0000

While running netstat I found these entries:

Active Internet connections (including servers)
Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)
tcp4       0      0  localhost.52730        undernet1.blueyo.ircd   
ESTABLISHED
tcp4       0      0  localhost.52398        minotor.spale.co.ircd    
ESTABLISHED
tcp4       0      0  localhost.60635        bagan2.srce.hr.ircd       
ESTABLISHED
 

  The foreign addresses all show ircd at the end,  but there is no irc 
clients or servers running and irc ports are blocked at the firewall.
Does anyone have any idea what might be going on here?

Gene