Subject: Re: being scanned.....
To: Reinoud Koornstra <Reinoud.Koornstra@ibbnet.nl>
From: Manuel Bouyer <bouyer@antioche.lip6.fr>
List: netbsd-help
Date: 09/06/1999 18:14:22
On Mon, Sep 06, 1999 at 12:33:21PM +0200, Reinoud Koornstra wrote:
> Hi all,
> 
> >From some ip number i get portmap scans some times a day.
> Then i get a messages like.
> mipam portmap[285]: connected from 131.211.124.15 to callit ..... bla bla
> I dont like this, cause i looks like somebody i looking for a weakness on
> my system.
> SO now in my
> 
> /etc/rc.conf i set portmap=NO
> But now i get messages all the time like this:
> 
> mipam inetd[184]: pmap_set: 100002 3 17 65532: No message of desired type
> And more of these all related to pmap. However, in my inetd i cant find
> anything related to pmap_set.
> Can anyone tell me what is going wrong? now?

portmap is used by rpc services.
The best thing to do here is to setup /etc/hosts.allow so that portmap and
inetd would only accept connections from trusted hosts.

man 5 hosts_access

--
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
--