Mailinglist Archive: opensuse-security (331 mails)
| < Previous | Next > |
Connections from/to exodus.net
- From: Holger Will <will@xxxxxxxxxxxxxxxx>
- Date: Mon, 11 Sep 2000 12:01:24 +0200
- Message-id: <B5E27A13.26D0%will@xxxxxxxxxxxxxxxx>
Hello,
3 to 5 times a week I've found these entries in my syslog on our firewall:
Sep 8 17:42:47 snoopy named[22437]: bad referral (net !< EXODUS.net)
Sep 8 17:42:47 snoopy last message repeated 11 times
I know these errors are not important, but what I don't understand is that
there must be a connection to or from exodus.net but I can't find any
connection to this domain neither mail nor http. These messages somtimes
appears in the middle of the night where nobody is working in our company.
Would it be possible that one of our internal servers attempted to make a
connection to exodus.net? Is there a known exploit I don't know?
How can I track down the problem?
--
Holger Will
GL Medientechnik
Südwestdeutsche Rollenoffset GmbH
Plieninger Str. 150
D-70567 Stuttgart
Tel.: +49 711 72008 167 http://www.suedwestrolle.de
Fax.: +49 711 72008 175 http://is.suedwestrolle.de
3 to 5 times a week I've found these entries in my syslog on our firewall:
Sep 8 17:42:47 snoopy named[22437]: bad referral (net !< EXODUS.net)
Sep 8 17:42:47 snoopy last message repeated 11 times
I know these errors are not important, but what I don't understand is that
there must be a connection to or from exodus.net but I can't find any
connection to this domain neither mail nor http. These messages somtimes
appears in the middle of the night where nobody is working in our company.
Would it be possible that one of our internal servers attempted to make a
connection to exodus.net? Is there a known exploit I don't know?
How can I track down the problem?
--
Holger Will
GL Medientechnik
Südwestdeutsche Rollenoffset GmbH
Plieninger Str. 150
D-70567 Stuttgart
Tel.: +49 711 72008 167 http://www.suedwestrolle.de
Fax.: +49 711 72008 175 http://is.suedwestrolle.de
| < Previous | Next > |