Subject: Security reports
To: None <port-mac68k@netbsd.org>
From: Eric Zylstra <ezylstra@cider2.uchicago.edu>
List: port-mac68k
Date: 12/02/1999 10:05:25
I've been wondering about the daily reports auto-generated by the 
system.  Every one has the following line:

Last dump(s) done (Dump '>' file systems):


There never are any reported Dumps.  When I grep the authlog for 
'dump', though, I get the following:
Nov 13 15:10:57 cider2 portmap[13256]: connect from 209.85.146.4 to dump()
Nov 13 20:30:58 cider2 portmap[13569]: connect from 203.69.36.63 to dump()
Nov 17 20:51:45 cider2 portmap[23908]: connect from 139.78.100.124 to dump()
Nov 18 11:45:58 cider2 portmap[25996]: connect from 128.135.195.19 to dump()


So, I assume, the Dump '>' file systems is a whole different thing 
from connecting to dump.  Can someone confirm (or otherwise) that 
connects from miscellaneous addresses to dump() is correct and valid 
behavior?

Many thanks for any help,

Eric Zylstra
ericz@ccp.uchicago.edu