From owner-freebsd-security  Mon Mar  5 14:13:10 2001
Delivered-To: freebsd-security@freebsd.org
Received: from awww.jeah.net (awww.jeah.net [216.111.239.130])
	by hub.freebsd.org (Postfix) with ESMTP id 8B9F437B718
	for <security@FreeBSD.ORG>; Mon,  5 Mar 2001 14:13:07 -0800 (PST)
	(envelope-from chris@jeah.net)
Received: from localhost (chris@localhost)
	by awww.jeah.net (8.11.1/8.11.0) with ESMTP id f25MCvw45579;
	Mon, 5 Mar 2001 16:12:57 -0600 (CST)
	(envelope-from chris@jeah.net)
Date: Mon, 5 Mar 2001 16:12:56 -0600 (CST)
From: Chris Byrnes <chris@jeah.net>
To: dce <dce@squish.org>
Cc: <security@FreeBSD.ORG>
Subject: RE: 31337
In-Reply-To: <Pine.BSO.4.10.10103051008420.15904-100000@tomahawk.SQUiSH.org>
Message-ID: <Pine.BSF.4.33.0103051612380.45434-100000@awww.jeah.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Heh, an IRCD is running on the machine, EliteIRCD.


+ Chris Byrnes, chris@JEAH.net
 + JEAH Communications
  + 1-866-AWW-JEAH (Toll-Free)


On Mon, 5 Mar 2001, dce wrote:

> Hello,
>
> I have noticed the following ports open on my FreeBSD 4.2-STABLE machine
>
> 31337/tcp  open        Elite
> 6667/tcp   open        irc
>
>
> I have also noticed these open after CVSuping from 4.0-RELEASE to
> 4.2-STABLE... Is this normal? Has a rootkit been installed? Any
> information provided is greatly appreciated.
>
>
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message