Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 May 1999 10:44:51 +0200
From:      Neil Blakey-Milner <nbm@mithrandr.moria.org>
To:        Greg Quinlan <greg@qmpgmc.ac.uk>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Server trying to connect to Port 113
Message-ID:  <19990521104451.A53814@rucus.ru.ac.za>
In-Reply-To: <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk>; from Greg Quinlan on Fri, May 21, 1999 at 09:31:37AM %2B0100
References:  <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri 1999-05-21 (09:31), Greg Quinlan wrote:
> I am not on the mailing list so please include me in your reply.
> 
> Can someone explain what this remote system is trying to do?
> 
> May 21 09:22:14 amanda /kernel: ipfw: 24110 Deny TCP <their ip>:1937 <our
> ip>:113 in via fxp1
> May 21 09:22:35 amanda last message repeated 3 times
> 
> Extract from /etc/services
> 
> auth            113/tcp    ident tap    #Authentication Service
> auth            113/udp    ident tap    #Authentication Service

It's trying to work out who's doing something to them.  Things like IRC,
squid, mail, news, and other services sometimes want to know which user
on a system is doing things to it.

It can usually be ignored.

Neil
-- 
Neil Blakey-Milner
nbm@rucus.ru.ac.za


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990521104451.A53814>