On Wed, 23 May 2001, Anders Johansson wrote: aj> No, the port here is 111, which is portmap. Someone is trying to get to your aj> sunrpc services, and they're being denied. Perfectly normal, I get about two aj> dozen of those a day. aj> That's right, I forget the port comes after the address, my stupid. Thanks for the reminder :) aj> Regards aj> Anders aj> aj> On Wednesday 23 May 2001 20:01, S.Toms wrote: aj> > Hey all, aj> > Quick question, every once in a while (via portsentry) I see the aj> > following appear in /var/log/messages aj> > aj> > May 20 13:34:25 pipedream kernel: Packet log: input DENY eth0 PROTO=6 aj> > 203.133.11.2:1543 xxx.xxx.xx.xxx:111 L=60 S=0x00 I=41515 F=0x4000 T=47 SYN aj> > (#66) May 20 14:08:05 pipedream kernel: Packet log: input DENY eth0 PROTO=6 aj> > 136.145.187.100:1442 xx.xx.xxx.xxx:111 L=60 S=0x00 I=40735 F=0x4000 T=49 aj> > SYN (#66) aj> -- S.Toms - smotrs@mindspring.com - www.mindspring.com/~smotrs SuSE Linux v7.0+ - Kernel 2.2.18 Feel disillusioned? I've got some great new illusions ...