From owner-freebsd-security Thu Mar 18 15: 5:54 1999 Delivered-To: freebsd-security@freebsd.org Received: from henry.cs.adfa.edu.au (henry.cs.adfa.edu.au [131.236.21.158]) by hub.freebsd.org (Postfix) with ESMTP id 5FFE914F64 for ; Thu, 18 Mar 1999 15:05:47 -0800 (PST) (envelope-from wkt@henry.cs.adfa.edu.au) Received: (from wkt@localhost) by henry.cs.adfa.edu.au (8.9.1/8.9.1) id KAA10759 for freebsd-security@FreeBSD.ORG; Fri, 19 Mar 1999 10:05:28 +1100 (EST) (envelope-from wkt) From: Warren Toomey Message-Id: <199903182305.KAA10759@henry.cs.adfa.edu.au> Subject: Re: unknown connection attempts from localhost In-Reply-To: <000001be7191$b78e5e70$0a0010ac@ren.craxx.com> from laurens van alphen at "Mar 18, 1999 11:50:27 pm" To: freebsd-security@FreeBSD.ORG Date: Fri, 19 Mar 1999 10:05:27 +1100 (EST) Reply-To: wkt@cs.adfa.edu.au X-Mailer: ELM [version 2.4ME+ PL43 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > [snip] Connection attempt to UDP 127.0.0.1:1645 from 127.0.0.1:53 > > [snip] Connection attempt to UDP 127.0.0.1:1739 from 127.0.0.1:53 Usually a reply to a DNS request from your machine. Your client has timed out, but the reply from the server still comes back. There just isn't anybody there to receive it. > > [snip] Connection attempt to UDP 127.0.0.1:512 from 127.0.0.1:2191 > > [snip] Connection attempt to UDP 127.0.0.1:512 from 127.0.0.1:2192 This is most likely /usr/libexec/mail.local which is trying to inform a nonexistent biff server (i.e comsat) that local email has been delivered. Warren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message