[asterisk-users] What is digium doing on port 113?

[Joel Maslak]

Probably doing an ident lookup when you send mail to the list.  Standard sendmail behavior. 

On Oct 30, 2010, at 5:37 PM, Hans Witvliet <hwit at a-domani.nl> wrote:

> While on the subject,
> 
> what is digium doing on my port 113?
> 
> just from my logfile:
> Oct 31 01:11:07 fw2 kernel:  EXT; INC, INTRUDER IN=eth0 OUT= MAC=08:00:20:da:3b:4a:00:90:1a:42:70:d3:08:00 
> SRC=216.207.245.17  LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=15394 PROTO=TCP SPT=56211 DPT=113 WINDOW=0 RES=0x00 RST URGP=0
> 
> host 216.207.245.17
> 17.245.207.216.in-addr.arpa domain name pointer lists.digium.com.
> 
> I'm not logged @digium, not compiling, not accessing list archives retieving svn's
> 
> 
>> From http://www.unidata.ucar.edu/support/help/MailArchives/idd/msg00983.html
> Port 113 supports what is known as an IDENT service.  Basically, it tries
> to determine the remote user of a given client network connection.
> Yesterday, our web server (128.117.149.62) logged several connections from
> mail.arilabs.com (206.129.115.118) to which it attempts a connection on
> port 113.  If it is sucessful, it will determine the remote user who
> connected.  This service is widely used on Unix systems, but not really
> supported on Windows or Mac operating systems. 
> 
> So why is the list-server sending an ident-REQ to my IP?
> 
> It is blocked anyway, bur WHY???
> 
> hw
> 
> 
> -- 
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users