Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 May 1999 01:39:32 -0700
From:      "Jan B. Koum " <jkb@best.com>
To:        Greg Quinlan <greg@qmpgmc.ac.uk>, freebsd-security@FreeBSD.ORG
Subject:   Re: Server trying to connect to Port 113
Message-ID:  <19990521013932.A13233@best.com>
In-Reply-To: <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk>; from Greg Quinlan on Fri, May 21, 1999 at 09:31:37AM %2B0100
References:  <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, May 21, 1999 at 09:31:37AM +0100, Greg Quinlan <greg@qmpgmc.ac.uk> wrote:
> I am not on the mailing list so please include me in your reply.
> 
> Can someone explain what this remote system is trying to do?
> 
> May 21 09:22:14 amanda /kernel: ipfw: 24110 Deny TCP <their ip>:1937 <our
> ip>:113 in via fxp1
> May 21 09:22:35 amanda last message repeated 3 times
> 
> Extract from /etc/services
> 
> auth            113/tcp    ident tap    #Authentication Service
> auth            113/udp    ident tap    #Authentication Service
> 
> Greg

	Might be sendmail on <their ip> going back into your box to get
ident info. Or this might be provoced by something else - like tcp
wrappers, irc, etc, etc...

-- Yan


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990521013932.A13233>