on Thu, Dec 27, 2001 at 11:35:37PM -0600, shock (stephen@virtual-attorney.com) wrote: > I keep getting the following in my log file: > > Dec 27 23:17:00 exitwound sshd2[3771]: X11 connection from > 192.168.9.1:3367 (server01.exitwound.org) > > Does anyone have some idea as to what this is? It started showing up > about 3 days ago. If that's not a system on your local network, then it appears that someone's spoofing local IPs to try connecting to your system. 196.168.*.* should be nonrouteable. A firewall will block these connections. Be default, X11 doesn't allow TCP/IP (remote) connections in more recent versions, though this can be overridden. Peace. -- Karsten M. Self <kmself@ix.netcom.com> http://kmself.home.netcom.com/ What part of "Gestalt" don't you understand? Home of the brave http://gestalt-system.sourceforge.net/ Land of the free We freed Dmitry! Boycott Adobe! Repeal the DMCA! http://www.freesklyarov.org Geek for Hire http://kmself.home.netcom.com/resume.html
Attachment:
pgp3ye3riLTQU.pgp
Description: PGP signature