From owner-freebsd-net@FreeBSD.ORG Sat Jan 3 15:59:12 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 87E1216A4CE for ; Sat, 3 Jan 2004 15:59:12 -0800 (PST) Received: from thong.s2s.msu.ru (thong.s2s.msu.ru [193.232.119.74]) by mx1.FreeBSD.org (Postfix) with ESMTP id 35B2B43D2D for ; Sat, 3 Jan 2004 15:59:08 -0800 (PST) (envelope-from chinhngt@sectorb.msk.ru) Received: from hq.sectorb.msk.ru (petaflop.lcm.msu.ru [193.232.113.220]) by thong.s2s.msu.ru (Postfix) with ESMTP id 0C6B12B6E; Sun, 4 Jan 2004 02:59:04 +0300 (MSK) Received: from unix.local (unix.local [172.16.12.120]) by hq.sectorb.msk.ru (Postfix) with ESMTP id 5A87E19E8; Sun, 4 Jan 2004 02:59:03 +0300 (MSK) Date: Sun, 4 Jan 2004 02:59:48 +0300 (MSK) From: Nguyen Tam Chinh X-X-Sender: chinhngt@chinhngt.b.gz.ru To: Gleb Smirnoff In-Reply-To: <20040103113428.GD35298@cell.sick.ru> Message-ID: <20040104024459.V98499@chinhngt.b.gz.ru> References: <20031231051118.V6209@chinhngt.b.gz.ru> <20040103113428.GD35298@cell.sick.ru> Website: http://chinhngt.hotmail.ru Home-addr: Vietnam_SR:Hue-city:45-Le_Huan-st Current-addr: Russian_Federation:Moscow:119234:Main_Building-MSU:Sector_B:Room_539 Keywords: 216091683 MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-net@freebsd.org Subject: Re: inetd[]: warning: can't get clientaddress: Connection reset by peer X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Jan 2004 23:59:12 -0000 On Sat, 3 Jan 2004, Gleb Smirnoff wrote: > On Wed, Dec 31, 2003 at 05:26:46AM +0300, Nguyen Tam Chinh wrote: > N> I get tons of messages with syntax like my line, all has > N> begun after I set up a qpopper/tsl and a smbd, but i seems not to be the > N> deal. I've searched through google and found some messages saying about > N> kind of attacking. I now just can't find any detail logs in my freebsd 4.9 > N> box. Please tell me where can i find more info about this, take and > N> read the inetd source-code is not a good idea :). Any comment is great. > > I should look into src/contrib/tcp_wrappers/socket.c, function sock_host(), > and analyze in what cases this message happens. That's right. I see it, the messages is created due to inpropper udp packets. Offtop: for AF_INET, getsockname() and getpeername() should act as the same, yes? ----- With best regards. Nguyen Tam Chinh chinhngt@sectorb.msk.ru