From owner-freebsd-questions@FreeBSD.ORG  Thu Feb  3 01:48:35 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EB50316A4CE
	for <questions@freebsd.org>; Thu,  3 Feb 2005 01:48:35 +0000 (GMT)
Received: from smarthost2.sentex.ca (smarthost2.sentex.ca [205.211.164.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6F80943D3F
	for <questions@freebsd.org>; Thu,  3 Feb 2005 01:48:35 +0000 (GMT)
	(envelope-from mike@sentex.net)
Received: from BLUELAPIS.sentex.ca (cage.simianscience.com [64.7.134.1])
	by smarthost2.sentex.ca (8.13.1/8.13.1) with SMTP id j131mXY8023124;
	Wed, 2 Feb 2005 20:48:33 -0500 (EST)
	(envelope-from mike@sentex.net)
From: Mike Tancsa <mike@sentex.net>
To: Gene <listmail@Bomgardner.net>
Date: Wed, 02 Feb 2005 20:48:35 -0500
Message-ID: <9l0301d279k7d62l14g4qc8ngjjilndmlf@4ax.com>
References: <42010776.2050908@Bomgardner.net>
In-Reply-To: <42010776.2050908@Bomgardner.net>
X-Mailer: Forte Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
X-Virus-Scanned: ClamAV version 0.81, clamav-milter version 0.81b on
	smarthost2.sentex.ca
X-Virus-Status: Clean
cc: questions@freebsd.org
Subject: Re: Strange foreign connections
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Feb 2005 01:48:36 -0000


What does=20
netstat -na
sockstat
show ?  I would not trust the DNS lookups in case someone is playing
around with hosts/DNS

	---Mike


On Wed, 02 Feb 2005 11:01:42 -0600, in sentex.lists.freebsd.questions
you wrote:

>While running netstat I found these entries:
>
>Active Internet connections (including servers)
>Proto Recv-Q Send-Q  Local Address          Foreign Address        =
(state)
>tcp4       0      0  localhost.52730        undernet1.blueyo.ircd  =20
>ESTABLISHED
>tcp4       0      0  localhost.52398        minotor.spale.co.ircd   =20
>ESTABLISHED
>tcp4       0      0  localhost.60635        bagan2.srce.hr.ircd      =20
>ESTABLISHED
>=20
>
>  The foreign addresses all show ircd at the end,  but there is no irc=20
>clients or servers running and irc ports are blocked at the firewall.
>Does anyone have any idea what might be going on here?
>
>Gene
>
>_______________________________________________
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to =
"freebsd-questions-unsubscribe@freebsd.org"