Strange connection

[Tomas Larsson]

OK, FEDORA Core 3, HTTPD Ver 2.??? The one shiped on the CORE 3 ISOs.
Everything els as it was shipped on the core3 ISOs.
The box sits behind a RH9 Box, acting as router and firewall using gShield
IP-Tables script, The server is nated, No DMZ..
The firewall is stealth, nothing incoming allowed except port 80 and port
443. everything else is dropped.



With best regards

Tomas Larsson
Sweden

Verus Amicus Est Tamquam Alter Idem

-----Original Message-----
From: Jonathan Pickard [mailto:fedora-list-bounces at redhat.com] On Behalf
Of Jonathan Pickard
Sent: Wednesday, July 20, 2005 2:59 AM
To: For users of Fedora Core releases
Subject: RE: Strange connection


  _____

From: fedora-list-bounces at redhat.com on behalf of Gabe Warren
Sent: Wed 7/20/2005 12:15 p.m.
To: For users of Fedora Core releases
Cc: users at httpd.apache.org
Subject: Re: Strange connection



Tomas Larsson wrote:

>Doing a netstat on my server, I find a strange connection.
>
>It's a crond-job with Apache as owner, and it seems to go to an
>irc-server, called 193.110.95.1:ircd, "carouge.ch.eu.undernet.org",
anyone
>that knows what this is??
>
>
Hi

can you provide some more information on your box?

fedora version, kernel, httpd version, etc

It may be usefull to alert others to an issue ion their setup

Thanks


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050720/f83bad18/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3018 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050720/f83bad18/attachment-0001.bin>