<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<TITLE>Meddelande</TITLE>
<META content="MSHTML 6.00.2800.1479" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=718240301-20072005><FONT face=Arial color=#0000ff size=2>OK,
FEDORA Core 3, HTTPD Ver 2.??? The one shiped on the CORE 3 ISOs. Everything els
as it was shipped on the core3 ISOs.</FONT></SPAN></DIV>
<DIV><SPAN class=718240301-20072005><FONT face=Arial color=#0000ff size=2>The
box sits behind a RH9 Box, acting as router and firewall using gShield IP-Tables
script, The server is nated, No DMZ..</FONT></SPAN></DIV>
<DIV><SPAN class=718240301-20072005><FONT face=Arial color=#0000ff size=2>The
firewall is stealth, nothing incoming allowed except port 80 and port 443.
everything else is dropped.</FONT></SPAN></DIV>
<DIV> </DIV>
<DIV> </DIV><!-- Converted from text/plain format -->
<P><FONT size=2>With best regards<BR><BR>Tomas Larsson<BR>Sweden<BR><BR>Verus
Amicus Est Tamquam Alter Idem</FONT> </P>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=sv dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Jonathan Pickard
[mailto:fedora-list-bounces@redhat.com] <B>On Behalf Of </B>Jonathan
Pickard<BR><B>Sent:</B> Wednesday, July 20, 2005 2:59 AM<BR><B>To:</B> For
users of Fedora Core releases<BR><B>Subject:</B> RE: Strange
connection<BR><BR></FONT></DIV>
<DIV id=idOWAReplyText81338 dir=ltr>
<DIV dir=ltr>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> fedora-list-bounces@redhat.com on behalf
of Gabe Warren<BR><B>Sent:</B> Wed 7/20/2005 12:15 p.m.<BR><B>To:</B> For
users of Fedora Core releases<BR><B>Cc:</B>
users@httpd.apache.org<BR><B>Subject:</B> Re: Strange
connection<BR></FONT><BR></DIV></DIV>
<DIV>
<P><FONT size=2>Tomas Larsson wrote:<BR><BR>>Doing a netstat on my server,
I find a strange connection.<BR>><BR>>It's a crond-job with Apache as
owner, and it seems to go to an<BR>>irc-server, called 193.110.95.1:ircd,
"carouge.ch.eu.undernet.org", anyone<BR>>that knows what this
is??<BR>> <BR>><BR>Hi</FONT></P>
<P><FONT size=2>can you provide some more information on your box?</FONT></P>
<P><FONT size=2>fedora version, </FONT><FONT size=2>kernel, httpd version,
etc</FONT></P>
<P><FONT size=2>It may be usefull to alert others to an issue ion their
setup</FONT></P>
<P><FONT size=2>Thanks<BR></P></FONT></DIV></BLOCKQUOTE></BODY></HTML>