From owner-freebsd-questions@FreeBSD.ORG Sun Nov 4 03:17:29 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4983916A419 for ; Sun, 4 Nov 2007 03:17:29 +0000 (UTC) (envelope-from thisisentirelybogus@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.237]) by mx1.freebsd.org (Postfix) with ESMTP id C1B6A13C49D for ; Sun, 4 Nov 2007 03:17:28 +0000 (UTC) (envelope-from thisisentirelybogus@gmail.com) Received: by wx-out-0506.google.com with SMTP id i29so1075886wxd for ; Sat, 03 Nov 2007 20:17:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:from:to:content-type:content-transfer-encoding:mime-version:subject:date:x-mailer; bh=YptUe7VsycqHXEagbN2nkjzBeGjsVbN9sL3Ppclp8us=; b=OFnnmGVBp83h7TIKdHnefUmOLrl7sVw6OydxlWeDRPQD7gWv9m1RYvn6AB2EJ0Tz6AODMIdiUXZK+y1OJFfbXpM1XJ87zO+6WclpC8qJq/RrVs0xUPt5w3WmIQkybew39a+LxXQFP48gVxTvyfh3SeGlwt0FWJRvsSAoV6yx6sQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:from:to:content-type:content-transfer-encoding:mime-version:subject:date:x-mailer; b=b4PbAYh/LgVMf3QgJ/pUtUZBGalrS3sKrWYBdBZZz4stivSlC+fHDQOSZCy6nun+1RHItDMKUfdsn+XrUH4eoruC3xeZI8uKZwVTmGf56s4x2S8EhDh2sOQVbbw/EgjjKF8hGzniY3FaAfEM6A7AIl3Tuyz0Zvo+36uTxovxD2w= Received: by 10.70.47.20 with SMTP id u20mr5511539wxu.1194144530495; Sat, 03 Nov 2007 19:48:50 -0700 (PDT) Received: from ?192.168.1.126? ( [65.7.183.45]) by mx.google.com with ESMTPS id i6sm6238169wxd.2007.11.03.19.48.48 (version=TLSv1/SSLv3 cipher=OTHER); Sat, 03 Nov 2007 19:48:49 -0700 (PDT) Message-Id: <2ADA1D0F-C749-42B2-855F-58E7D3C5B5D8@gmail.com> From: Bob Calder To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v912) Date: Sat, 3 Nov 2007 22:48:47 -0400 X-Mailer: Apple Mail (2.912) Subject: odd entry appeared in my routing table X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Nov 2007 03:17:29 -0000 I am sincerely sorry if this is the wrong place to post. Please direct me to the proper forum if possible. A couple of entries for "bannerconnect.com" have appeared in the routing table of my laptop. In one case the entry is in both destination and gateway columns and in the other, my IP is in the destination and bannerconnect.com is the gateway entry. It shows as being "up" and as "host". The normal entries are in the table as well and these have not replaced the normal routing entries. I am in a home network using DSL on OSX. Looking back through the daily cron, it appeared on October 30th and that's all I have been able to figure out. I know Apple changed things and that you folks may not be able to help me but what I'm asking about is a probable method of attack. I flushed the table and the entry came back. I believe my hosts file has prevented it from being used by directing it to the loopback but that may be superstition on my part. Thanks, Bob