From owner-freebsd-questions Sun Jan 21 17:46:23 2001 Delivered-To: freebsd-questions@freebsd.org Received: from shalimar.net.au (shalimar.net.au [198.142.161.98]) by hub.freebsd.org (Postfix) with ESMTP id 3AF8037B401 for ; Sun, 21 Jan 2001 17:46:04 -0800 (PST) Received: from shalimar.net.au (localhost [127.0.0.1]) by shalimar.net.au (8.11.1/8.11.1) with SMTP id f0M1jia16067; Mon, 22 Jan 2001 12:45:45 +1100 (EST) (envelope-from count@shalimar.net.au) From: Zero Sum Organization: Tobacco Chewers and Body Painters Association. Date: Mon, 22 Jan 2001 12:43:37 +1100 X-Mailer: KMail [version 1.1.99] Content-Type: text/plain; charset="us-ascii" Cc: freebsd-questions@FreeBSD.ORG To: cjclark@alum.mit.edu, "Crist J. Clark" References: <01012211261001.14467@shalimar.net.au> <20010121172202.A10761@rfx-216-196-73-168.users.reflex> In-Reply-To: <20010121172202.A10761@rfx-216-196-73-168.users.reflex> Subject: Re: firewall, fetch and ICQ? MIME-Version: 1.0 Message-Id: <01012212433700.01296@shalimar.net.au> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Monday 22 January 2001 12:22, Crist J. Clark wrote: >On Mon, Jan 22, 2001 at 11:26:10AM +1100, Zero Sum wrote: >> >> Okay, so I must be missing something... >> >> Why does the following :- >> >> >> Attempting to fetch from >> ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/sobomax/. >> fetch: galeon-0.8.4.tar.gz: Operation timed out >> >> reproducibly put the following line in my *firewall* log. >> >> ICQ: Unknown version (27129) >> >> Urgle.... I could undrstand some sort of accept or deny message in my log, >> but just that bald ICQ statement in the firewall log? What gives? > >I've only seen that from Ethereal. That's really in your firewall log? I was tailing /var/log/security. I was incorrect, it does not appear in the log, just on the screen - an xterm. grep reveals no ICQ in any log file So it is not "in the firewall log" - my stupid mistake. However, I can't figure out where it comes from as it appears on the single xterm that I use to tail my logs. It is not (apparently) a console message as it is not in /var/log/messages. Geoff -- count@shalimar.net.au Vescere bracis meis http://www.hack.gr/jargon/html/D/disclaimer.html To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message