From owner-freebsd-bugs@FreeBSD.ORG Mon Feb 2 10:22:56 2004 Return-Path: Delivered-To: freebsd-bugs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7DD0716A4CE for ; Mon, 2 Feb 2004 10:22:56 -0800 (PST) Received: from mta10.adelphia.net (mta10.adelphia.net [68.168.78.202]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4D7E243D66 for ; Mon, 2 Feb 2004 10:22:20 -0800 (PST) (envelope-from Barbish3@adelphia.net) Received: from barbish ([68.169.105.190]) by mta10.adelphia.net (InterMail vM.5.01.06.05 201-253-122-130-105-20030824) with SMTP id <20040202182228.DWQS9070.mta10.adelphia.net@barbish> for ; Mon, 2 Feb 2004 13:22:28 -0500 From: "JJB" References: <200402021740.i12He6j1005122@freefall.freebsd.org> Date: Mon, 2 Feb 2004 13:22:11 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <200402021740.i12He6j1005122@freefall.freebsd.org> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal X-X-Sender: bz@e0-0.zab2.int.zabbadoz.net X-Virus-Scanned: by AMaViS cksoft-s20020300-20031204bz on transport.cksoft.de cc: freebsd-bugs@FreeBSD.org Subject: RE: conf/62230: log-in-vain issues it's msg every time 'mail' command is used. X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Barbish3@adelphia.net List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Feb 2004 18:22:56 -0000 # The log_in_vain MIB will provide you with logging of attempted # connections to your box on any port which does not have a service # running on it. For example, if you do not have DNS server on your # computer and someone would try to access your computer through DNS # port 53, you would see a message such as: Connection attempt to # UDP yourIP:53 from otherIP:X (where X is some high port #) displayed # on the root console screen. This message also gets posted to # /var/log/messages & /var/log/security.log. # The following statements enable this function. # man tcp(4) and man udp(4) contain a little information on these MIBs net.inet.tcp.log_in_vain=1 net.inet.udp.log_in_vain=1 I believe this description is pirated from the old 4.7 LINT kernel source file. The implied meaning is access you computer, as in from the external interface. Thats how I read that. On Mon, 2 Feb 2004, JJB wrote: > Log-in-vain purpose in life is to interrogate attempts from > the external interface, not the localhost internal functions, woooh, who says that ? references ? > From what little documentation is published on Log-in-vain, > it is not functioning correctly, period. please start reading with rc.conf(5) which will point you to more documentation [tcp(4) and udp(4)]. -- Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT 56 69 73 69 74 http://www.zabbadoz.net/