From owner-freebsd-security Fri May 21 1:44:20 1999 Delivered-To: freebsd-security@freebsd.org Received: from rucus.ru.ac.za (rucus.ru.ac.za [146.231.29.2]) by hub.freebsd.org (Postfix) with SMTP id 0B4CE15959 for ; Fri, 21 May 1999 01:44:09 -0700 (PDT) (envelope-from nbm@rucus.ru.ac.za) Received: (qmail 54340 invoked by uid 1003); 21 May 1999 08:44:51 -0000 Date: Fri, 21 May 1999 10:44:51 +0200 From: Neil Blakey-Milner To: Greg Quinlan Cc: freebsd-security@FreeBSD.ORG Subject: Re: Server trying to connect to Port 113 Message-ID: <19990521104451.A53814@rucus.ru.ac.za> References: <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.1i In-Reply-To: <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk>; from Greg Quinlan on Fri, May 21, 1999 at 09:31:37AM +0100 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri 1999-05-21 (09:31), Greg Quinlan wrote: > I am not on the mailing list so please include me in your reply. > > Can someone explain what this remote system is trying to do? > > May 21 09:22:14 amanda /kernel: ipfw: 24110 Deny TCP :1937 ip>:113 in via fxp1 > May 21 09:22:35 amanda last message repeated 3 times > > Extract from /etc/services > > auth 113/tcp ident tap #Authentication Service > auth 113/udp ident tap #Authentication Service It's trying to work out who's doing something to them. Things like IRC, squid, mail, news, and other services sometimes want to know which user on a system is doing things to it. It can usually be ignored. Neil -- Neil Blakey-Milner nbm@rucus.ru.ac.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message