From owner-freebsd-questions Mon Apr 8 22:26:58 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id WAA08473 for questions-outgoing; Mon, 8 Apr 1996 22:26:58 -0700 (PDT) Received: from shell.aros.net (shell.aros.net [205.164.111.19]) by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id WAA08466 for ; Mon, 8 Apr 1996 22:26:56 -0700 (PDT) Received: (from angio@localhost) by shell.aros.net (8.7.5/Unknown) id XAA16632; Mon, 8 Apr 1996 23:29:08 -0600 (MDT) From: Dave Andersen Message-Id: <199604090529.XAA16632@shell.aros.net> Subject: Re: mystery phone call To: terry@lambert.org (Terry Lambert) Date: Mon, 8 Apr 1996 23:29:08 -0600 (MDT) Cc: brian@filoli.com, questions@FreeBSD.org In-Reply-To: <199604082337.QAA03456@phaeton.artisoft.com> from Terry Lambert at "Apr 8, 96 04:37:35 pm" X-Mailer: ELM [version 2.4ME+ PL13 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-questions@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk Lo and behold, Terry Lambert once said: > A security audit is run nightly (makes for a bad machine for a > bedroom). It can be disabled by modifying /etc/daily. > > The log should be in the root mailbox. Login as root and run > mail. > > I'd be surprised if it made a call. If you have a service provider, > then when it went to do the name lookup, if you have your network > configured incorrectly, it could have been sendmail firing the > phone call off to talk to your nameserver. Actually, it's not sendmail doing the lookup. My home machine calls in at 2am to my network as regularly as clockwork. The explanation is a call in /etc/daily: echo "network:" netstat -i echo "" netstat -i attempts to do a reverse namelookup on the addresses it presents to you for inspection. If you want to stop your machine from dialing in, change the 'netstat -i' call to a 'netstat -ni'. I haven't bothered because I find it quaint that my computer likes to dialin at 2am, and it makes a neat clock to tell me that I'm up too late again. -Dave Andersen -- angio@aros.net Complete virtual hosting and business-oriented system administration Internet services. (WWW, FTP, email) http://www.aros.net/ http://www.aros.net/about/virtual "There are only two industries that refer to thier customers as 'users'."