From owner-freebsd-security Mon May 24 6:48:28 1999 Delivered-To: freebsd-security@freebsd.org Received: from amanda.qmpgmc.ac.uk (amanda.qmpgmc.ac.uk [194.81.5.1]) by hub.freebsd.org (Postfix) with ESMTP id DA45314DFB for ; Mon, 24 May 1999 06:48:17 -0700 (PDT) (envelope-from greg@qmpgmc.ac.uk) Received: from greg (gquinlan [194.81.0.56]) by amanda.qmpgmc.ac.uk (8.9.3/8.9.3) with SMTP id OAA14176 for ; Mon, 24 May 1999 14:48:21 +0100 (BST) Message-ID: <013a01bea5ec$0a572220$380051c2@greg.qmpgmc.ac.uk> Reply-To: "Greg Quinlan" From: "Greg Quinlan" To: Subject: Re: Server trying to connect to Port 113 Date: Mon, 24 May 1999 14:48:01 +0100 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thanks So will it effect anything by opening port 113? ...(getting 2000 or so log entries from the same server) Greg (ps. Remember to reply all, not on the list) -----Original Message----- From: Jan B. Koum To: Greg Quinlan ; freebsd-security@FreeBSD.ORG Date: 23 May 1999 12:55 Subject: Re: Server trying to connect to Port 113 >On Fri, May 21, 1999 at 09:31:37AM +0100, Greg Quinlan wrote: >> I am not on the mailing list so please include me in your reply. >> >> Can someone explain what this remote system is trying to do? >> >> May 21 09:22:14 amanda /kernel: ipfw: 24110 Deny TCP :1937 > ip>:113 in via fxp1 >> May 21 09:22:35 amanda last message repeated 3 times >> >> Extract from /etc/services >> >> auth 113/tcp ident tap #Authentication Service >> auth 113/udp ident tap #Authentication Service >> >> Greg > > Might be sendmail on going back into your box to get >ident info. Or this might be provoced by something else - like tcp >wrappers, irc, etc, etc... > >-- Yan > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message