From: Jose Vicente Nunez Zuleta (josevnz@newbreak.com)
Date: Mon Sep 09 2002 - 17:45:55 EDT
Greetings,
I got a strange message from Syslog almost every second:
(17:36:57) newbreak-syslog-prod: Sep 9 17:36:19 lenbkx0005.server01.newbreak.com rpc.metamhd[18483]: refused connect from unknown
(17:37:01) newbreak-syslog-prod: Sep 9 17:36:25 lenbkx0005.server01.newbreak.com rpc.metamhd[18484]: warning: can't get client address: Primitive not supported by provider
(17:37:05) newbreak-syslog-prod: Sep 9 17:36:25 lenbkx0005.server01.newbreak.com rpc.metamhd[18484]: refused connect from unknown
(17:37:09) newbreak-syslog-prod: Sep 9 17:36:31 lenbkx0005.server01.newbreak.com rpc.metamhd[18485]: warning: can't get client address: Primitive not supported by provider
(17:37:13) newbreak-syslog-prod: Sep 9 17:36:31 lenbkx0005.server01.newbreak.com rpc.metamhd[18485]: refused connect from unknown
(17:37:17) newbreak-syslog-prod: Sep 9 17:36:37 lenbkx0005.server01.newbreak.com Sep 9 17:36:43 lenbkx0005.server01.newbreak.com rpc.metamhd[18487]: warning: can't get client address: Primitive not supported by provider
(17:37:21) newbreak-syslog-prod: Sep 9 17:36:43 lenbkx0005.server01.newbreak.com rpc.metamhd[18487]: refused connect from unknown
I checked wich "netstat" but found no opened conections from external machines nor the firewall.
Also my service is protected using tcpwrappers:
100230/1 tli rpc/tcp wait root /usr/local/bin/tcpd /usr/opt/SUNWmd/sbin/rpc.metamhd
Here is my /etc/host.allow (/etc/host.deny is ALL:ALL):
ALL:127.0.0.1,xxx.yyy.zz.ww/255.255.255.0,yyy.yyy.zz.ww/255.255.255.0 (where xxx.yyy.zz.ww and yyy.yyy.zz.ww) are my internal networks.
Any idea about why this is happening?
Is this deamon really neccesary (i don't do any remote monitoring / admin with it).
I'll summarize.
Thanks in advance,
Jose Vicente.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:24:54 EDT