Re: Strange connection attempts

2006-09-15 Thread Anuradha Weeraman
On 9/15/06, Graham Smith <[EMAIL PROTECTED]> wrote: I run Bind and I was wondering if that might be the cause. I've just grepped through the whole of etc looking for 5353 and come up empty. I've also tried netstat -l to no avail. Oops, I missed the fact that 192.168.0.1 in the SRC field was you

Re: Strange connection attempts

2006-09-15 Thread Graham Smith
Quoting Anuradha Weeraman <[EMAIL PROTECTED]>: On 9/15/06, Graham Smith <[EMAIL PROTECTED]> wrote: Sep 15 10:54:39 compost kernel: Output: IN= OUT=eth1 SRC=192.168.0.1 DST=224.0.0.251 LEN=74 TOS=0x00 PREC=0x00 TTL=255 ID=1 DF PROTO=UDP SPT=56190 DPT=5353 LEN=54 UDP port 5353 is being used by

Re: Strange connection attempts

2006-09-15 Thread Anuradha Weeraman
On 9/15/06, Graham Smith <[EMAIL PROTECTED]> wrote: Sep 15 10:54:39 compost kernel: Output: IN= OUT=eth1 SRC=192.168.0.1 DST=224.0.0.251 LEN=74 TOS=0x00 PREC=0x00 TTL=255 ID=1 DF PROTO=UDP SPT=56190 DPT=5353 LEN=54 UDP port 5353 is being used by mDNSResponder. Also, these appear to be multicas

Strange connection attempts

2006-09-15 Thread Graham Smith
Hi folks, I've got a little bit of a problem with my main server that has been driving me to distraction. Something is constantly trying to make a connection to an external IP address using the internal interface. The firewall is fairly tightly set up so I get log messages about these att