Strange connect attempts
Barbish3 at adelphia.net
Sat Feb 7 07:19:14 PST 2004
First the message you are getting is issued by the log-in-vain
log-in-vain has bug where it does it's filter task on internal
packets instead of just on the external interface.
This bug has been reported many times and the maint team feels this
is too trivial of an bug to fix.
What is causing it is sendmail, every time you post mail to sendmail
server it issues the biff packet to inform the local user that they
have mail. This is the normal way sendmail works. You can customize
sendmail and disable this function if you can figure out how to do
that, or disable log-in-vain will also stop the messages.
Log-in-vain is not really needed if you have firewall, as firewall
sees all the packets coming in from the public internet first and
drops these types of offending packets as technically invalid before
the filter rules even get a chance at them.
Best advice is disable Log-in-vain, and let system continue to
function as normal without this Log-in-vain bug causing you any more
false log messages problems.
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of Benjamin
Sent: Saturday, February 07, 2004 6:51 AM
To: freebsd-questions at FreeBSD.org
Subject: Strange connect attempts
-----BEGIN PGP SIGNED MESSAGE-----
Under FreeBSD 5.2-RELEASE on i386 I get lots of kernel messages like
Feb 7 12:38:01 neuromancer kernel: Connection attempt to UDP
127.0.0.1:512 from 127.0.0.1:49383
/etc/services has this to say on Port 512/udp:
biff 512/udp comsat #used by mail system to
Is there any way I can get rid of these messages? From the fact they
show up on my console, I assume port 512 is not open. Should I open
The machine is on a local network with me being the only user, so
security considerations aren't that important, really. =)
On the other hand, what do I need it for? I'd rather have it just
Thank you very much,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)
-----END PGP SIGNATURE-----
freebsd-questions at freebsd.org mailing list
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions