Date: Tue, 22 Aug 1995 21:16:25 +0200 (MET DST) From: guido@gvr.win.tue.nl (Guido van Rooij) To: mbarkah@hemi.com (Ade Barkah) Cc: hackers@freebsd.org Subject: Re: rlogin on illegal port Message-ID: <199508221916.VAA00780@gvr.win.tue.nl> In-Reply-To: <199508211957.NAA07189@hemi.com> from "Ade Barkah" at Aug 21, 95 01:57:58 pm
next in thread | previous in thread | raw e-mail | index | archive | help
Ade Barkah wrote: > > Hello, > > One of our FreeBSD 2.0.5 machines showed the following within > the console messages: > > (date) (time) (hostname) rlogin [3643]: usage rlogind [-aln] > (date) (time) (hostname) rlogin [3643]: Connection from 128.x.x.x > on illegal port > > What exactly does it mean and do we need to be concerned about > this ? Seems like someone ran a probe on us or something. rlogin connections should come from privileged ports. This connection came from an unpriv'ed one.. So I guess someone probed you. The first message probably means your entry for rlogind in etc/inetd.conf conatins an invalid switch. -Guido
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199508221916.VAA00780>