Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Mar 2000 13:24:18 PST
From:      "Jeff Hamilton" <hjeffrey@hotmail.com>
To:        dwmalone@maths.tcd.ie
Cc:        freebsd-questions@freebsd.org, freebsd-stable@freebsd.org
Subject:   Re: /etc/hosts.allow
Message-ID:  <20000328212418.44269.qmail@hotmail.com>

next in thread | raw e-mail | index | archive | help
>From: David Malone <dwmalone@maths.tcd.ie>
>To: Jeff Hamilton <hjeffrey@hotmail.com>
>CC: freebsd-questions@freebsd.org, freebsd-stable@freebsd.org
>Subject: Re: /etc/hosts.allow
>Date: Tue, 28 Mar 2000 21:14:12 +0100
>
>On Tue, Mar 28, 2000 at 09:47:43AM -0800, Jeff Hamilton wrote:
>
> > Mar 28 17:37:54 hostname portmap[154]: warning: /etc/hosts.allow, line 
>16:
> > twist_option: dup: Bad file descriptor
> >
> > What am I doing wrong, or is this message expected?
>
>My guess is that the portmapper is getting a tcp connection, which the
>remote end closes almost immediately. Then when the wrapping code goes
>to to dup the discriptor which is supposed to be connected it finds it
>is unconnected.

Could this possibly be an indicator of a port scan or other exploit attempt? 
  Is there anyway to trace the IP address that originated the connection?

Thanks.

Jeff
hjeffrey@hotmail.com
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000328212418.44269.qmail>