From owner-freebsd-questions Mon Aug 23 13:29: 1 1999 Delivered-To: freebsd-questions@freebsd.org Received: from scientia.demon.co.uk (scientia.demon.co.uk [212.228.14.13]) by hub.freebsd.org (Postfix) with ESMTP id F36A614CC0 for ; Mon, 23 Aug 1999 13:28:30 -0700 (PDT) (envelope-from ben@scientia.demon.co.uk) Received: from lithium.scientia.demon.co.uk ([192.168.0.3]) by scientia.demon.co.uk with esmtp (Exim 3.032 #1) id 11Ixxt-000B7q-00; Mon, 23 Aug 1999 18:33:01 +0100 Received: (from ben) by lithium.scientia.demon.co.uk (Exim 3.032 #1) id 11Ixxs-00088l-00; Mon, 23 Aug 1999 18:33:00 +0100 Date: Mon, 23 Aug 1999 18:33:00 +0100 From: Ben Smithurst To: tps@ti.sk Cc: questions@freebsd.org Subject: Re: FW: neocakavane rebooty - zistenie Message-ID: <19990823183259.A30806@lithium.scientia.demon.co.uk> References: <006201beed5a$3f00a900$231da8c3@tps.tps.sk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.6i In-Reply-To: <006201beed5a$3f00a900$231da8c3@tps.tps.sk> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Tomas TPS Ulej wrote: >> Connection attempt to UDP 192.108.130.71:1095 from 192.108.130.91:53 >> Connection attempt to TCP 192.108.130.71:143 from 210.178.1.129:11269 >> Connection attempt to TCP 192.108.130.71:113 from 194.1.241.1:6760 > > In /etc/services: > >> netrjs-1 71/tcp #Remote Job Service >> netrjs-1 71/udp #Remote Job Service > > What is Remote Job Service? Is documentation available? Sorry, I'm confused. In what way is the /etc/services entry for port 71 related to the above log messages? The destination ports for the attempted connections were 1095 (not listed), 143 (imap) and 113 (ident). I can only think you saw the 71 as the final octet of the destination address and looked up the wrong number... The source ports are pretty much irrelevant, but note that the source port for the UDP attempt was 53 (dns), I think people use this because people who don't know how to set up BIND properly allow all udp traffic from source port 53 through their firewalls (and I admit, I did this until recently). -- Ben Smithurst | PGP: 0x99392F7D ben@scientia.demon.co.uk | key available from keyservers and | ben+pgp@scientia.demon.co.uk To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message