On Oct 27, 2002, 20:47 (+0100) Ernest E Vogelsinger wrote: > At 20:41 27.10.2002, Wolfgang Pfeiffer said: > --------------------[snip]-------------------- > >On Oct 27, 2002, 20:19 (+0100) Wolfgang Pfeiffer wrote:
[ ... ] > >> to the scanning activities against my machine, because the WWW. pages > >> I try to access seem to be different from the machine that probe me .. > > > >... *most* of them are different ... > > > >For example when I sent my previous message to this list I got > >"probed" (or whatever it is) by 66.187.233.31 on 113: 113 seems to be > >a sendmail port, and the IP seems to be a Redhat one :) ... and I sent > >my message with sendmail ... [ ... ] > > Copy/Paste from the SUSE security list: > > Date: Sat, 25 Sep 1999 10:29:35 +0200 > From: Gerhard Sittig <[EMAIL PROTECTED]> > Subject: Re: [suse-security] Port 113? > > On Thu, Sep 23, 1999 at 12:21 +0200, Jochen Lillich wrote: > > > > Our firewall detects (and denies) connections from our external web > > server to our mail servers port 113 (ident). What causes the web > > server to use that port? And should I permit these connections? > :! grep -w 113 /etc/services > auth 113/tcp tap ident authentication > This is usually referenced from the remote host back to you when > you relay mail there. Is there smtp traffic in company with > these events? You might want to log them for investigation. Not being sure whether I got what you mean: But this port 113 connection attempt came when I used sendmail to send my message directly to the redhat mail server, thus bypassing my ISP's machines ... I'm not worried about this (or should I ? ...), because at this instance I could relate this connect attempt to something that was initiated by me (i.e. by sending my mail)... Perhaps checking the headers of this mail will shed some light on it: again I will send it directly to the redhat mailserver ... And to clarify: I'm running a standalone machine here, at home, no LAN .. Thanks. Regards Wolfgang -- Key on: http://home.t-online.de/home/520050060325-0001/ Key fingerprint = 5FFA E2D1 6DB5 C023 0C5F 3FA7 4E08 5F9F 1560 0BA8 Home Page: www.geocities.com/wolfgangpfeiffer/ -- END TRANSMISSION -- -- redhat-list mailing list unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list