From owner-freebsd-questions Fri Jul 6 7:57:37 2001 Delivered-To: freebsd-questions@freebsd.org Received: from kermit.netivity.nl (wc-68.r-195-85-144.essentkabel.com [195.85.144.68]) by hub.freebsd.org (Postfix) with ESMTP id 1C8CD37B401 for ; Fri, 6 Jul 2001 07:57:34 -0700 (PDT) (envelope-from enriko.groen@netivity.nl) Received: by KERMIT with Internet Mail Service (5.5.2650.21) id <32P3X10T>; Fri, 6 Jul 2001 16:03:04 +0200 Message-ID: <510EAC2065C0D311929200A0247252622F7983@NETIVITY-FS> From: Enriko Groen To: 'Jim Freeze' , questions@freebsd.org Subject: RE: What is significance of security check output Date: Fri, 6 Jul 2001 16:03:03 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > -----Original Message----- > From: Jim Freeze [mailto:jim@freeze.org] > Keep receiving messages similar to the one below. I've looked > up these ports but can't find anything significant. > > Are these messages benign? > > > eeyore1 denied packets: > > > 04600 6 7561 deny icmp from any to any This is just the denial of any ICMP packets... probably ping requests... > > eeyore1 kernel log messages: > > > ipfw: 37 Accept TCP 217.80.181.154:3918 24.9.218.175:21 in via vx0 > > > ipfw: 40 Accept TCP 157.95.47.65:33634 24.9.218.175:22 in via vx0 these are ftp (21) and ssh (22) connections coming in to your system via the vx0 interface. Are you expecting the mentioned ip-adresses to connect to your machine via ftp or ssh? -- Enriko Groen, Hosting manager -------------------------------------------------------- netivity bv www.netivity.nl enriko.groen@netivity.nl 038 - 850 1000 van nagellstraat 4 8011 eb zwolle -------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message