OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: What does this mean and how do I stop it ?
From: Cyrille Lefevre (clefevreciteweb.net)
Date: Mon Jul 24 2000 - 18:14:28 CDT

Lyndon Nerenberg <lyndonmessagingdirect.com> writes:

> --On 07/24/00 19:29:15 +0200 Gerhard Sittig <Gerhard.Sittiggmx.net>
> wrote:
>
> > On Mon, Jul 24, 2000 at 08:56 +1000, Stanley Hopcroft wrote:
> >>
> >> These entries appear frequently in the daily security report of
> >> a FreeBSD 4.0-RELEASE machine (Bind 8.2.x)
> >>
> >> > Connection attempt to UDP 127.0.0.1:2343 from 127.0.0.1:53
> >
> > I don't care if everybody's telling you it's DNS *lookup* -- I
> > feel this is something different, since it's going *from* port 53
> > *to* something random(?).
>
> If you have 'nameservers 127.0.0.1' in /etc/resolv.conf then this is
> probably named answering a DNS lookup request from a local process.

well. except by setting log_in_vain to zero. is there another way to
get rid of those messages ? if not, log_in_vain is meaningless if
we have to set it to zero to get rid of those messages, no ?

Cyrille. 

--
home: mailto:clefevreciteweb.net work: mailto:Cyrille.Lefevreedf.fr

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message