Unexpected FTP Activity

10-10-2008, 03:03 PM

Filipe Brandenburger wrote:
> Hi,
>
> On Fri, Oct 10, 2008 at 10:06, Mike -- EMAIL IGNORED
> <m_d_berger_1900@yahoo.com> wrote:
> > Since I put my new Centos box on the net, it frequently
> > tr1es to make ftp contact with IP address 64.90.181.77 .
>
> This is a CentOS repository mirror:
> http://mirror.nyi.net/centos/
>
> Your box is connecting to that site to get security updates. If it's
> doing that without you knowing, it's probably because yum is
> configured to do that automatically in cron.

Or it's yum-updatesd in action.

Ralph
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 03:15 PM

Its a Data Center in NY City... I bet yum update is there...
http://www.nyi.net/

Frank

Mike -- EMAIL IGNORED wrote:

Since I put my new Centos box on the net, it frequently
tr1es to make ftp contact with IP address 64.90.181.77 .

Why is this, and does anyone recognize this IP address?
Is it spyware?

Mike.

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 03:17 PM

On Fri, 10 Oct 2008 17:03:41 +0200, Ralph Angenendt wrote:

[...]
>
> Or it's yum-updatesd in action.
>
> Ralph
[...]

It looks like this is it; I shut it down.
I don't remember being offered a choice about
this on install; maybe I didn't recognize it.
I would think it should be made obvious.

Is there any other automatic Internet activity
in Centos?

Thanks,
Mike.

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 03:25 PM

On Oct 10, 2008, at 11:17 AM, Mike -- EMAIL IGNORED wrote:

Is there any other automatic Internet activity
in Centos?

ntpd, possibly, if you set it up during firstboot without realizing.

-steve

--
If this were played upon a stage now, I could condemn it as an
improbable fiction. - Fabian, Twelfth Night, III,v

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 03:27 PM

Mike -- EMAIL IGNORED wrote:

On Fri, 10 Oct 2008 17:03:41 +0200, Ralph Angenendt wrote:

[...]

Or it's yum-updatesd in action.

Ralph

[...]

It looks like this is it; I shut it down.

Is there a reason why you don't want your machine updated?

--
tkb

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 04:07 PM

On Fri, 10 Oct 2008 11:27:45 -0400, Toby Bluhm wrote:

> Mike -- EMAIL IGNORED wrote:
>> On Fri, 10 Oct 2008 17:03:41 +0200, Ralph Angenendt wrote:
>>
>> [...]
>>> Or it's yum-updatesd in action.
>>>
>>> Ralph
>> [...]
>>
>> It looks like this is it; I shut it down.
>
> Is there a reason why you don't want your machine updated?

Yes indeed! I do some complicated things, and I can
do without the wonderful surprises that updates
sometimes deliver. I do updates, but at times of
my choice, and I watch what I get.

Mike.

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 04:52 PM

On Fri, Oct 10, 2008 at 12:07, Mike -- EMAIL IGNORED
<m_d_berger_1900@yahoo.com> wrote:
> Yes indeed! I do some complicated things, and I can
> do without the wonderful surprises that updates
> sometimes deliver. I do updates, but at times of
> my choice, and I watch what I get.

Good luck with the wonderful surprises you will have to deal with if
your machine gets compromised while running unpatched vulnerable
software.

Filipe
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 05:46 PM

On Fri, 10 Oct 2008 12:52:33 -0400, Filipe Brandenburger wrote:

> On Fri, Oct 10, 2008 at 12:07, Mike -- EMAIL IGNORED
> <m_d_berger_1900@yahoo.com> wrote:
>> Yes indeed! I do some complicated things, and I can do without the
>> wonderful surprises that updates sometimes deliver. I do updates, but
>> at times of my choice, and I watch what I get.
>
> Good luck with the wonderful surprises you will have to deal with if
> your machine gets compromised while running unpatched vulnerable
> software.
>
> Filipe

No doubt, what you say is a concern. But I have a very tight
firewall, and I take few risks. On Linux systems, in my
experience, surprise results from updates have been more of
a problem.

Mike.

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 06:42 PM

on 10-10-2008 9:52 AM Filipe Brandenburger spake the following:
> On Fri, Oct 10, 2008 at 12:07, Mike -- EMAIL IGNORED
> <m_d_berger_1900@yahoo.com> wrote:
>> Yes indeed! I do some complicated things, and I can
>> do without the wonderful surprises that updates
>> sometimes deliver. I do updates, but at times of
>> my choice, and I watch what I get.
>
> Good luck with the wonderful surprises you will have to deal with if
> your machine gets compromised while running unpatched vulnerable
> software.
>
> Filipe
He didn't say he wasn't going to update, he just said he wants to do it on his
schedule. Nothing wrong with that. As a matter of fact, it is more proper to
update when you have tested on an enterprise system.

--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

10-10-2008, 07:59 PM

On Fri, 10 Oct 2008 11:27:45 -0400, Toby Bluhm wrote:
> Is there a reason why you don't want your machine updated?

On Fri, Oct 10, 2008 at 12:07, Mike -- EMAIL IGNORED wrote:
> Yes indeed! [...]

On Fri, Oct 10, 2008 at 14:42, Scott Silva <ssilva@sgvwater.com> wrote:
> He didn't say he wasn't going to update,

Yes, he did! :-)

> he just said he wants to do it on his
> schedule. Nothing wrong with that. As a matter of fact, it is more proper to
> update when you have tested on an enterprise system.

Agreed, in particular with updates that bump a release (5.1 -> 5.2), I
also do it manually and not automatically.

However, nowadays I consider updating the system and applying security
patches an essential part of the sysadmin role in a Linux environment.

Filipe
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos