Date: Mon, 04 Feb 2002 11:23:02 -0700 From: Colin Faber <cfaber@fpsn.net> To: Martin McCormick <martin@dc.cis.okstate.edu> Cc: freebsd-security@FreeBSD.ORG Subject: Re: Port 113 Traffic Message-ID: <3C5ED186.3B2801CF@fpsn.net> References: <200202041818.g14IIgM69616@dc.cis.okstate.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, cat /etc/services | grep 113 auth 113/tcp ident tap #Authentication Service auth 113/udp ident tap #Authentication Service Martin McCormick wrote: > > Why might a FreeBSD system be generating traffic on port > 113? We have noticed occasional traffic from a FreeBSD system of > ours to various addresses outside our network on Port 113. > > If I blocked it altogether with IPFW, would it effect ssh > in any way? > > I am theorizing right now that hosts in the big wide > world are occasionally probing this port and the traffic might be > a response of some kind, maybe nothing more than "I don't know > you. Goodbye!" > > Hopefully, our sniffer will eventually see one of the > exchanges and we will have a better idea of what is going on. > > Martin McCormick WB5AGZ Stillwater, OK > OSU Center for Computing and Information Services Network Operations Group > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message -- Colin Faber (303) 859-1491 fpsn.net, Inc. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3C5ED186.3B2801CF>