Re: [leafnode-list] remote host?

[Jonathan Larmour <jlarmour@xxxxxxxxxx>]

Brendan Halpin wrote:
> 
> Recently while testing something unrelated to leafnode, I
> temporarily disabled ipchains.
> 
> While thus unprotected, leafnode seems to have made connections to
> remote hosts with which I have no prior relationship :-):
> 
> May 19 21:57:35 wivenhoe leafnode[26750]: local  host: my.real.host.ie:119 (xxx.xxx.xxx.xxx)
> May 19 21:57:35 wivenhoe leafnode[26750]: remote host: 169dyn83.com21.casema.net:33861 (62.234.88.83)
> 
> A number of different remote hosts were involved.
> 
> Is this something I should worry about, and if not, what is
> actually going on?

leafnode can only be started by someone else connecting in from outside, so
it means those machines connected to your server not the other way round.
My machine regularly gets probes from outside trying to see what ports are
open. That's bound to be what has happened here.

Jifl
-- 
Red Hat, Rustat House, Clifton Road, Cambridge, UK. Tel: +44 (1223) 271062
--[ "You can complain because roses have thorns, or you ]--
--[  can rejoice because thorns have roses." -Lincoln   ]-- Opinions==mine

-- 
leafnode-list@xxxxxxxxxxxxxxxxxxxxxxxxxxxx -- mailing list for leafnode
To unsubscribe, send mail with "unsubscribe" in the subject to the list