Date: Wed, 23 Aug 1995 00:41:17 -0600 (MDT) From: Ade Barkah <mbarkah@hemi.com> To: peter@haywire.dialix.com (Peter Wemm) Cc: freebsd-hackers@freebsd.org Subject: Re: rlogin on illegal port Message-ID: <199508230641.AAA13389@hemi.com> In-Reply-To: <41cj7p$260$1@haywire.DIALix.COM> from "Peter Wemm" at Aug 22, 95 08:40:24 pm
next in thread | previous in thread | raw e-mail | index | archive | help
> fn@pain.csrv.uidaho.edu (Faried Nawaz) writes: > >Ade Barkah wrote... > > > Hello, > > > > What exactly does it mean and do we need to be concerned about > > this ? Seems like someone ran a probe on us or something. > > >they're probably running kerbIV. this message is probably generated > >by a connection to the klogin (or eklogin) port. > > Doing a satan scan on a host causes this too... I think that's the > most likely - somebody's probed you... Yes, in fact my first thought was someone ran Satan on me (I don't have, er, courtney to detect it.) However, in this case I was able to trace the user and it appears that it was a kerberos login. Is there a better forum to discuss security issues for FreeBSD ? We are an internet provider and would like to keep up to date on possible problems. Thanks for all the help, -Ade -------------------------------------------------------------------- Inet: mbarkah@hemi.com - HEMISPHERE ONLINE - www: <http://hemi.com/>; --------------------------------------------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199508230641.AAA13389>