From owner-freebsd-security Wed Jan 3 0:24: 0 2001 From owner-freebsd-security@FreeBSD.ORG Wed Jan 3 00:23:58 2001 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mail.interactivate.com (unknown [63.141.73.15]) by hub.freebsd.org (Postfix) with ESMTP id ADFFD37B400 for ; Wed, 3 Jan 2001 00:23:58 -0800 (PST) Received: from interactivate.com (snakcx408168-b.@cx408168-b.escnd1.sdca.home.com [24.20.227.61]) by mail.interactivate.com (8.11.1/8.11.1) with ESMTP id f038iuv28380; Wed, 3 Jan 2001 00:44:58 -0800 (PST) (envelope-from larry@interactivate.com) Sender: lomion@mail.interactivate.com Message-ID: <3A52E197.8B9829C5@interactivate.com> Date: Wed, 03 Jan 2001 00:23:51 -0800 From: Lawrence Sica Organization: Interactivate, Inc. X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en MIME-Version: 1.0 To: Alex Popa Cc: freebsd-security@FreeBSD.ORG Subject: Re: Connections to UDP port 512 References: <20010103101253.A10140@ldc.ro> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Alex Popa wrote: > Any ideas as of what might be generating a few of these: > grep 512 /etc/services exec 512/tcp #remote process execution; biff 512/udp comsat #used by mail system to notify users it's generated by something trying to see if you have mail, im guessing you have inetd turned off? the /etc/services file usually has a good list of what is what based on port number. --Larry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message