On Oct 27, 2002, 20:47 (+0100) Ernest E Vogelsinger wrote:

> At 20:41 27.10.2002, Wolfgang Pfeiffer said:
> --------------------[snip]--------------------
> >On Oct 27, 2002, 20:19 (+0100) Wolfgang Pfeiffer wrote:

[ ... ]

> >> to the scanning activities against my machine, because the WWW. pages
> >> I try to access seem to be different from the machine that probe me ..
> >
> >... *most* of them are different ...
> >
> >For example when I sent my previous message to this list I got
> >"probed" (or whatever it is) by 66.187.233.31 on 113: 113 seems to be
> >a sendmail port, and the IP seems to be a Redhat one :) ... and I sent
> >my message with sendmail ...


[ ... ]

>
> Copy/Paste from the SUSE security list:
>
> Date: Sat, 25 Sep 1999 10:29:35 +0200
> From: Gerhard Sittig <[EMAIL PROTECTED]>
> Subject: Re: [suse-security] Port 113?
>
> On Thu, Sep 23, 1999 at 12:21 +0200, Jochen Lillich wrote:
> >
> > Our firewall detects (and denies) connections from our external web
> > server to our mail servers port 113 (ident). What causes the web
> > server to use that port? And should I permit these connections?
> :! grep -w 113 /etc/services
> auth 113/tcp tap ident authentication
> This is usually referenced from the remote host back to you when
> you relay mail there. Is there smtp traffic in company with
> these events? You might want to log them for investigation.

Not being sure whether I got what you mean:

But this port 113 connection attempt came when I used sendmail to send
my message directly to the redhat mail server, thus bypassing my
ISP's machines ... I'm not worried about this (or should I ? ...),
because at this instance I could relate this connect attempt to
something that was initiated by me (i.e. by sending my mail)...

Perhaps checking the headers of this mail will shed some light on it:
again I will send it directly to the redhat mailserver ...

And to clarify: I'm running a standalone machine here, at home, no
LAN ..

Thanks.

Regards
Wolfgang

-- 
Key on: http://home.t-online.de/home/520050060325-0001/
Key fingerprint = 5FFA E2D1 6DB5 C023 0C5F  3FA7 4E08 5F9F 1560 0BA8

Home Page: www.geocities.com/wolfgangpfeiffer/

                            -- END TRANSMISSION --



-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to