From owner-freebsd-security Tue Jun 5 14:55: 3 2001 Delivered-To: freebsd-security@freebsd.org Received: from ariel.phys.wesleyan.edu (ariel.phys.wesleyan.edu [129.133.71.143]) by hub.freebsd.org (Postfix) with ESMTP id 301EA37B401 for ; Tue, 5 Jun 2001 14:54:58 -0700 (PDT) (envelope-from vlad@ariel.phys.wesleyan.edu) Received: by ariel.phys.wesleyan.edu (Postfix, from userid 1001) id 8B3A51EA30C; Tue, 5 Jun 2001 17:55:03 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by ariel.phys.wesleyan.edu (Postfix) with ESMTP id 88C391E650C; Tue, 5 Jun 2001 17:55:03 -0400 (EDT) Date: Tue, 5 Jun 2001 17:55:03 -0400 (EDT) From: Vladimir Savichev To: Cc: Subject: Re: rpc.statd attack before ipfw activated Message-ID: <20010605174214.J90423-100000@ariel.phys.wesleyan.edu> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org how interesting. I'm here on FreeBSD ariel.phys.wesleyan.edu 4.3-STABLE FreeBSD 4.3-STABLE #2: Sun Jun 3 21:23:38 EDT 20 01 root@ariel.phys.wesleyan.edu:/usr/obj/usr/src/sys/ARIEL i386 I got pretty much similar log several times for a last couple of days, was wondering what the hell rpc is doing. Could you point me where I can read more about. How can I log call hosts. --Vlad To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message