Date: Mon, 23 Aug 1999 18:33:00 +0100 From: Ben Smithurst <ben@scientia.demon.co.uk> To: tps@ti.sk Cc: questions@freebsd.org Subject: Re: FW: neocakavane rebooty - zistenie Message-ID: <19990823183259.A30806@lithium.scientia.demon.co.uk> In-Reply-To: <006201beed5a$3f00a900$231da8c3@tps.tps.sk> References: <006201beed5a$3f00a900$231da8c3@tps.tps.sk>
next in thread | previous in thread | raw e-mail | index | archive | help
Tomas TPS Ulej wrote:
>> Connection attempt to UDP 192.108.130.71:1095 from 192.108.130.91:53
>> Connection attempt to TCP 192.108.130.71:143 from 210.178.1.129:11269
>> Connection attempt to TCP 192.108.130.71:113 from 194.1.241.1:6760
>
> In /etc/services:
>
>> netrjs-1 71/tcp #Remote Job Service
>> netrjs-1 71/udp #Remote Job Service
>
> What is Remote Job Service? Is documentation available?
Sorry, I'm confused. In what way is the /etc/services entry for port
71 related to the above log messages? The destination ports for the
attempted connections were 1095 (not listed), 143 (imap) and 113
(ident). I can only think you saw the 71 as the final octet of the
destination address and looked up the wrong number...
The source ports are pretty much irrelevant, but note that the source
port for the UDP attempt was 53 (dns), I think people use this because
people who don't know how to set up BIND properly allow all udp traffic
from source port 53 through their firewalls (and I admit, I did this
until recently).
--
Ben Smithurst | PGP: 0x99392F7D
ben@scientia.demon.co.uk | key available from keyservers and
| ben+pgp@scientia.demon.co.uk
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990823183259.A30806>