Re: [OpenAFS] Re: Deleted db servers still being queried

2011-08-23 Thread Jaap Winius
Quoting Andrew Deason : What's the source port on these packets from the 'master' dbserver? The source port is usually 7001 with destination port 7003. However, for less than 30 minutes this morning, I saw packets arriving for destination port 7002 from arbitrary unprivileged port numbers.

[OpenAFS] Re: Deleted db servers still being queried

2011-08-22 Thread Andrew Deason
On Tue, 23 Aug 2011 03:57:01 +0200 Jaap Winius wrote: > Quoting Chris Hoy Poy : > > > if you still have the old IPs in your control, put an iptables (or > > some other firewall rule) up to log any traffic to/from the ports. > > That's how I know where the packets are coming from and where the