Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Feb 2002 15:43:50 +0300
From:      Alexandr Alov <amil198@eltex.ru>
To:        Peter Pentchev <roam@ringlet.net>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: about 113 port
Message-ID:  <200202141243.PAA05312@incredible.hq.eltex.ru>
In-Reply-To: <20020214143702.A935@straylight.oblivion.bg>
References:  <200202141018.NAA05098@incredible.hq.eltex.ru> <20020214135052.A339@straylight.oblivion.bg> <200202141216.PAA05281@incredible.hq.eltex.ru> <20020214143702.A935@straylight.oblivion.bg>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello !

Thank you.

PPAA> This is a connection *attempt*, not an actual connection.
PPAA> It is only an attempt, because there is nothing that listens
PPAA> on port 113 on 10.0.0.2; therefore, the OS returns a TCP RST (reset)
PPAA> packet, and a TCP client on 10.0.0.1 would get a 'connection
PPAA> refused' error.

PPAA> Many programs attempt connections to port 113 - mail servers,
PPAA> IRC servers, some FTP servers..  If there is nothing that answers
PPAA> such connection requests, the programs just go on, having received
PPAA> no data.  This is the way it should generally be :)  (unless you happen
PPAA> to use one of those picky-picky IRC servers that require an auth response;
PPAA> but that's another topic for another day)  In general, you should leave
PPAA> things configured exactly the way they are now - nothing listening
PPAA> on port 113.  The network traffic that you are seeing is just somebody
PPAA> *trying* to connect and failing - it is completely normal.

PPAA> G'luck,
PPAA> Peter

--
Alexandr Alov
System Engineer, Eltex TC Co. 
Saint-Petersburg, Russia.
e-mail: amil198@eltex.ru
www: www.eltex.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200202141243.PAA05312>