Great Circle Associates Firewalls
(February 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: port 113?
From: Kyle Amon <kyle_amon @ jabil . com>
Date: Tue, 13 Feb 96 18:15:07 EST
To: firewalls @ greatcircle . com

     Is there any reason (other than the loss of remote user identification
     services on my host) that I might _not_ want to disable identd?
     
     Seems to me I have no need for it.
     
     Kyle Amon


______________________________ Forward Header __________________________________
Subject: Re: port 113?
Author:  Bill Bunting <wbunting @
 ch .
 inri .
 com> at Smtplink_South
Date:    2/10/96 8:07 AM


At 11:36 AM 2/9/96 +0500, Jim Legg wrote: 
>Hi,
>
>I noticed in my log files the following (just a snippet): 
>
>2/9-10:42:07-81 tcp 199.18.25.195/3054 -> 206.214.232.100/www 44 syn 
>2/9-10:42:08-81 tcp 199.18.25.195/113 <- 206.214.232.100/1867 44 syn !pass(64) 
>2/9-10:42:11-81 tcp 199.18.25.195/113 <- 206.214.232.100/1867 44 syn !pass(64) 
>2/9-10:42:17-81 tcp 199.18.25.195/113 <- 206.214.232.100/1867 44 syn !pass(64) 
>2/9-10:42:29-81 tcp 199.18.25.195/113 <- 206.214.232.100/1867 44 syn !pass(64) 
>2/9-10:42:53-81 tcp 199.18.25.195/113 <- 206.214.232.100/1867 44 syn !pass(64) 
>2/9-10:42:55-81 tcp 199.18.25.195/3055 -> 206.214.232.100/www 44 syn 
>2/9-10:42:55-81 tcp 199.18.25.195/3056 -> 206.214.232.100/www 44 syn 
>2/9-10:42:56-81 tcp 199.18.25.195/113 <- 206.214.232.100/2005 44 syn !pass(64) 
>2/9-10:42:56-81 tcp 199.18.25.195/113 <- 206.214.232.100/2007 44 syn !pass(64) 
>2/9-10:42:58-81 tcp 199.18.25.195/113 <- 206.214.232.100/2005 44 syn !pass(64) 
>2/9-10:42:59-81 tcp 199.18.25.195/113 <- 206.214.232.100/2007 44 syn !pass(64) 
>2/9-10:43:04-81 tcp 199.18.25.195/113 <- 206.214.232.100/2005 44 syn !pass(64) 
>2/9-10:43:05-81 tcp 199.18.25.195/113 <- 206.214.232.100/2007 44 syn !pass(64) 
>
>When this web site (nslookup returns Facade.COM) is accessed it tries to come 
>back to your system on port 113.  What is this port? (It's not listed in my 
>/etc/services)
     
This is the ident protocol.  The WWW server is trying to associate a user 
name with the connection by using the identification protocol.  Sendmail 
will do the same thing (if configured).
     
 --------------------------------------- 
|    Bill Bunting, Software Engineer    |     ****** 
|Inter-National Research Institute, Inc.|   ***_******_  __    _  
| 1441 Crossways Boulevard, Suite 102   |  ===//=/\**//=/- )==//= 
|     Chesapeake, Virginia 23320        | {==//=//\\//=//||==//== 
|    V(804)424-8675 F(804)420-4262      |  =//=//==\/*//=||=//=== 
|         (wbunting @
 inri .
 com)           |   *********  
|         (bunting @
 cs .
 odu .
 edu)          |     *****   
|    http://www.cs.odu.edu/~bunting     | 
 --------------------------------------- 
     



Follow-Ups:
Indexed By Date Previous: Win NT protocols?
From: Petter . Haggman @ lule . frontec . se (Petter H{ggman)
Next: RE: Gauntlet 3.1 Packet Filter?
From: Michael Brown <BROWNMK @ misf . network . com>
Indexed By Thread Previous: Re: port 113?
From: Bill Van Emburg <bve @ jcrew . com>
Next: Re: port 113?
From: Chris Woods <cjwoods @ Paladin . COM>

Google
 
Search Internet Search www.greatcircle.com