Date: Fri, 21 May 1999 05:38:01 -0300 (ADT) From: Michael Richards <026809r@dragon.acadiau.ca> To: Greg Quinlan <greg@qmpgmc.ac.uk> Cc: freebsd-security@FreeBSD.ORG Subject: Re: Server trying to connect to Port 113 Message-ID: <Pine.GSO.4.05.9905210535540.5287-100000@dragon> In-Reply-To: <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 21 May 1999, Greg Quinlan wrote: > Can someone explain what this remote system is trying to do? > > May 21 09:22:14 amanda /kernel: ipfw: 24110 Deny TCP <their ip>:1937 <our > ip>:113 in via fxp1 > May 21 09:22:35 amanda last message repeated 3 times Quite possibly, the remote machine is running tcp wrappers or some other such thing and it's causing it to try a ident query when a connection is made. Something like that. For more info, log the packets. You'd probably find that they are normal "ident" packets... -Michael To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.05.9905210535540.5287-100000>