From owner-freebsd-current Tue Apr 9 02:57:24 1996 Return-Path: owner-current Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id CAA28963 for current-outgoing; Tue, 9 Apr 1996 02:57:24 -0700 (PDT) Received: from sovcom.kiae.su (sovcom.kiae.su [144.206.136.1]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id CAA28956 for ; Tue, 9 Apr 1996 02:57:10 -0700 (PDT) Received: by sovcom.kiae.su id AA16274 (5.65.kiae-1 ); Tue, 9 Apr 1996 12:45:10 +0300 Received: by sovcom.KIAE.su (UUMAIL/2.0); Tue, 9 Apr 96 12:45:10 +0300 Received: (from ache@localhost) by astral.msk.su (8.7.5/8.7.3) id NAA01091; Tue, 9 Apr 1996 13:37:50 +0400 (MSD) Message-Id: <199604090937.NAA01091@astral.msk.su> Subject: Re: routed delete my PPP default: how to fight it? To: joerg_wunsch@uriah.heep.sax.de Date: Tue, 9 Apr 1996 13:37:50 +0400 (MSD) Cc: freebsd-current@FreeBSD.org In-Reply-To: <199604090736.JAA08067@uriah.heep.sax.de> from "J Wunsch" at "Apr 9, 96 09:36:39 am" From: =?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?= (aka Andrey A. Chernov, Black Mage) X-Class: Fast X-Mailer: ELM [version 2.4ME+ PL15 (25)] Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-current@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk > As Satoshi Asami wrote: > > > Here's all the stuff that's in the kernel's message buffer. It > > doesn't overflow anything, it happens only intermittently (this many > > in ~2 days). By the way, 3128 is the port for the HTTP proxy running > > on another machine (128.32.38.224), it could have something to do with > > me running netscape during these times. > > > Connection attempt to TCP 136.152.64.181:113 from 136.152.64.181:60781 > > Connection attempt to TCP 136.152.64.181:113 from 136.152.64.181:3818 > > That's ``auth''. I've always wondered at my machine at work (where i > tcpdump all traffic that's going through the Internet router) who is > connecting to this port. It's also somehow related to sendmail. > > Does anybody know more about ``auth''? Yes, run 'identd' to stop it. -- Andrey A. Chernov : And I rest so composedly, /Now, in my bed, ache@astral.msk.su : That any beholder /Might fancy me dead - http://dt.demos.su/~ache : Might start at beholding me, /Thinking me dead. RELCOM Team,FreeBSD Team : E.A.Poe From "For Annie" 1849