Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek
"Noah L. Meyerhans" <[EMAIL PROTECTED]> writes:

> On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote:
> > 
> > I believe that UDP port is for receiving DNS responses.
> 
> Umm...  No.
> 
> It's used for ICP, a protocol for intercommunication between squid
> caches.  For example, at my site we have two different caches.  One is
> basically transparent.  The other provides anonymizing services.  But,
> through ICP, both caches can make use of each other's cached objects.
> 
> Dunno how you turn it off, though.  Iptables?  
> 
> noah

He already said he turned off the ICP port, so I'm guessing that isn't
it.  Also, the ICP port is 3130 by default, not 1414.

Squid also can use a udp port for snmp (default 3401).

FWIW, I found a couple of references to squid's use of a random high
udp port on the squid-user list.  The only responses I could find
indicated that this port is used for DNS.

-Kevin



Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek
"Noah L. Meyerhans" <[EMAIL PROTECTED]> writes:

> On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote:
> > 
> > I believe that UDP port is for receiving DNS responses.
> 
> Umm...  No.
> 
> It's used for ICP, a protocol for intercommunication between squid
> caches.  For example, at my site we have two different caches.  One is
> basically transparent.  The other provides anonymizing services.  But,
> through ICP, both caches can make use of each other's cached objects.
> 
> Dunno how you turn it off, though.  Iptables?  
> 
> noah

He already said he turned off the ICP port, so I'm guessing that isn't
it.  Also, the ICP port is 3130 by default, not 1414.

Squid also can use a udp port for snmp (default 3401).

FWIW, I found a couple of references to squid's use of a random high
udp port on the squid-user list.  The only responses I could find
indicated that this port is used for DNS.

-Kevin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek

I believe that UDP port is for receiving DNS responses.

-Kevin

Jason Lunz <[EMAIL PROTECTED]> writes:

> does anyone know what squid's udp sockets are for, and how to close
> them? As far as I can tell, I don't need them, but I've been unable to
> find a combination of squid directives to make them all go away. The icp
> port can be closed using "icp_port 0", but the other one is dynamic and
> isn't referred to in the squid docs as far as I can tell:
> 
> [kahlua](0) # netstat -lp | grep squid
> tcp0  0 *:3128  *:*   LISTEN  673/(squid)
> udp0  0 *:1414  *:*   673/(squid)
> 
> the udp port isn't there immediately after starting squid, but it always
> shows up after a client uses the proxy. port 1414 isn't constant; it's
> different every time.
> 
> Jason



Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek

I believe that UDP port is for receiving DNS responses.

-Kevin

Jason Lunz <[EMAIL PROTECTED]> writes:

> does anyone know what squid's udp sockets are for, and how to close
> them? As far as I can tell, I don't need them, but I've been unable to
> find a combination of squid directives to make them all go away. The icp
> port can be closed using "icp_port 0", but the other one is dynamic and
> isn't referred to in the squid docs as far as I can tell:
> 
> [kahlua](0) # netstat -lp | grep squid
> tcp0  0 *:3128  *:*   LISTEN  673/(squid)
> udp0  0 *:1414  *:*   673/(squid)
> 
> the udp port isn't there immediately after starting squid, but it always
> shows up after a client uses the proxy. port 1414 isn't constant; it's
> different every time.
> 
> Jason


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Debian Security Advisory DSA 151-1

2002-08-13 Thread Kevin Cheek

That didn't happen on any of the systems I updated today.  Same old
xinetd.conf files that I had before.

-Kevin

Thomas Viehmann <[EMAIL PROTECTED]> writes:

[...]
> I just wanted to note that the xinetd upgrade moved my xinetd.conf to
> a backup and left me without running IMAP (which was in xinetd.conf
> before the upgrade).
> 
> 
> Regards
> 
> Thomas
> 
> (I'm not subscribed to d-s but will read the archive.)