From owner-freebsd-questions Mon Jul 30 4:42:38 2001 Delivered-To: freebsd-questions@freebsd.org Received: from web12808.mail.yahoo.com (web12808.mail.yahoo.com [216.136.174.43]) by hub.freebsd.org (Postfix) with SMTP id A89A037B401 for ; Mon, 30 Jul 2001 04:42:36 -0700 (PDT) (envelope-from zaunere@yahoo.com) Message-ID: <20010730114236.87971.qmail@web12808.mail.yahoo.com> Received: from [66.114.66.188] by web12808.mail.yahoo.com; Mon, 30 Jul 2001 04:42:36 PDT Date: Mon, 30 Jul 2001 04:42:36 -0700 (PDT) From: Hans Zaunere Subject: Spoof attack? To: questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I have tcp and udp log_in_vain options enabled in my kernel. I have noticed a couple odd connection attempts: Connection attempt to UDP 127.0.0.1:512 from 127.0.0.1:1131 I also have another couple attempts from 127.0.0.1:1137. The only open port I have is ssh so I'm not sure what, if anything, could be causing this from my local machine. Is someone trying to attack me by spoofing? If so can I get any more info? Any ideas would be great, Thank you, Hans zaunere@yahoo.com __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message