Hi there,

our IT department has informed me that masses of requests are being sent from my computer to our two LDAP servers on port 389. After a detailed investigation, the problem could be clearly traced back to "cygwin".

Firewall logs show that about any tool, even base tools "sort" or "less", initiates a request to port 389 on our LDAP servers.

Sorry, I am _not_ going to release "cygcheck.out" to public, since it contains sensitive information about the domain and its groups and memberships.

Even after reinstalling cygwin from another server, the problem still appears. Could it be that this is part of an attack?

Best regards,
Tobias

--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

Reply via email to