From owner-freebsd-security Sun Jul 23 15:27:52 2000 Delivered-To: freebsd-security@freebsd.org Received: from cage.simianscience.com (cage.simianscience.com [64.7.134.1]) by hub.freebsd.org (Postfix) with ESMTP id 8149237B58F for ; Sun, 23 Jul 2000 15:27:45 -0700 (PDT) (envelope-from mike@sentex.net) Received: from p10 (chimp [192.168.0.2]) by cage.simianscience.com (8.9.3/8.9.3) with ESMTP id SAA14437; Sun, 23 Jul 2000 18:27:21 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <4.2.2.20000723181947.04949220@mail.sentex.net> X-Sender: mdtancsa@mail.sentex.net X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Sun, 23 Jul 2000 18:22:04 -0400 To: Stanley Hopcroft , security@FreeBSD.ORG From: Mike Tancsa Subject: Re: What does this mean and how do I stop it ? In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 08:56 AM 7/24/00 +1000, Stanley Hopcroft wrote: >Dear Ladeis and Gentlemen, > >These entries appear frequently in the daily security report of a >FreeBSD 4.0-RELEASE machine (Bind 8.2.x) > > > Connection attempt to UDP 127.0.0.1:2343 from 127.0.0.1:53 > >What do they mean and if they are not signs of bad things how can I get >rid of them ? It means a UDP packet from 127.0.0.1 port 53 got sent to 127.0.0.1 port 2343, but nothing there was listening. If you want to disable it type, sysctl net.inet.udp.log_in_vain=0 ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Network Administration, mike@sentex.net Sentex Communications www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message