Why these connections from 127.0.0.1?

[Fernando Gleiser]

On Thu, 2 Dec 2004, Jonathon McKitrick wrote:

>
> I'm trying to figure out why these messages are showing up:
>
> neptune kernel log messages:
> > Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:3746 flags:0x02
> > Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:2058 flags:0x02
> > Connection attempt to UDP 127.0.0.1:512 from 127.0.0.1:4293
> > Connection attempt to UDP 127.0.0.1:512 from 127.0.0.1:4864
> > Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:1972 flags:0x02
> > Connection attempt to UDP 127.0.0.1:512 from 127.0.0.1:3859
>
> I thought my firewall was allowing loopback traffic.

They look like "log in vain" entries. to you have log in vain enabled?

113/tcp is identd and 512/udp is biff. My guess is your mail system is
generating those requests and log in vain logs them.


			Fer