From owner-freebsd-questions  Sat Oct 17 13:25:39 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA21395
          for freebsd-questions-outgoing; Sat, 17 Oct 1998 13:25:39 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from smtp1.home.se (smtp1.home.se [194.52.202.171])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA21389
          for <freebsd-questions@FreeBSD.ORG>; Sat, 17 Oct 1998 13:25:36 -0700 (PDT)
          (envelope-from saska@home.se)
Received: from fysgr386.sn.umu.se (saska@fysgr386.sn.umu.se [130.239.128.238])
	by smtp1.home.se (8.8.8/8.8.7) with SMTP id WAA17275;
	Sat, 17 Oct 1998 22:25:04 +0200 (CEST)
Date: Sat, 17 Oct 1998 22:27:22 +0200 (CEST)
From: Markus Holmberg <saska@home.se>
X-Sender: saska@fysgr386.sn.umu.se
To: Doug White <dwhite@resnet.uoregon.edu>
cc: freebsd-questions@FreeBSD.ORG
Subject: Re: syslogd listening on udp 514 even after user '-s'
In-Reply-To: <Pine.BSF.4.03.9810161318250.28399-100000@resnet.uoregon.edu>
Message-ID: <Pine.BSF.4.02A.9810172225001.8213-100000@fysgr386.sn.umu.se>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hm.. It gives the same output for each time I check which ports there is
something listening on..

In what way do you mean someone is trying to abuse it? You mean someone is
sending UDP's to fill my syslogs up? I can't see how that is related to
this.. The problem was that I used the '-s' flag when starting syslogd up,
which should mean it should *not* be listening on the port.. But it
obviously does! (For more ppl than just me)..

Best Regards, Markus.

On Fri, 16 Oct 1998, Doug White wrote:

> On Wed, 14 Oct 1998, Markus Holmberg wrote:
> 
> > Hello..
> > 
> > The syslogd daemon is started up with the '-s' option, which should
> > *disable* remote logging. As I understand, it should not listen to UDP
> > packets then. But as the output below shows, it's still listening for
> > udp's on port 514.. Can anyone explain why?
> 
> So it can tell you if someone is trying to abuse your syslog port.  See
> the syslogd manpage.
> 
> Doug White                               
> Internet:  dwhite@resnet.uoregon.edu    | FreeBSD: The Power to Serve
> http://gladstone.uoregon.edu/~dwhite    | www.freebsd.org
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message