Problems with rpc.metamhd: got weird messages from Syslog
2007-12-24 23:37:00
I got a strange message from Syslog almost every second:
(17:36:57) newbreak-syslog-prod: Sep 9 17:36:19 lenbkx0005.server01.newbreak.com rpc.metamhd[18483]: refused connect from unknown
(17:37:01) newbreak-syslog-prod: Sep 9 17:36:25 lenbkx0005.server01.newbreak.com rpc.metamhd[18484]: warning: can't get client address: Primitive not supported by provider
(17:37:05) newbreak-syslog-prod: Sep 9 17:36:25 lenbkx0005.server01.newbreak.com rpc.metamhd[18484]: refused connect from unknown
(17:37:09) newbreak-syslog-prod: Sep 9 17:36:31 lenbkx0005.server01.newbreak.com rpc.metamhd[18485]: warning: can't get client address: Primitive not supported by provider
(17:37:13) newbreak-syslog-prod: Sep 9 17:36:31 lenbkx0005.server01.newbreak.com rpc.metamhd[18485]: refused connect from unknown
(17:37:17) newbreak-syslog-prod: Sep 9 17:36:37 lenbkx0005.server01.newbreak.com Sep 9 17:36:43 lenbkx0005.server01.newbreak.com rpc.metamhd[18487]: warning: can't get client address: Primitive not supported by provider
(17:37:21) newbreak-syslog-prod: Sep 9 17:36:43 lenbkx0005.server01.newbreak.com rpc.metamhd[18487]: refused connect from unknown
I checked wich "netstat" but found no opened conections from external machines nor the firewall.
Also my service is protected using tcpwrappers:
100230/1 tli rpc/tcp wait root /usr/local/bin/tcpd /usr/opt/SUNWmd/sbin/rpc.metamhd
Here is my /etc/host.allow (/etc/host.deny is ALL:ALL):
ALL:127.0.0.1,xxx.yyy.zz.ww/255.255.255.0,yyy.yyy.zz.ww/255.255.255.0 (where xxx.yyy.zz.ww and yyy.yyy.zz.ww) are my internal networks.
Any idea about why this is happening?
Is this deamon really neccesary (i don't do any remote monitoring / admin with it).
I'll summarize.
Thanks in advance,
Jose Vicente.
Comments
Got something to say?
You must be logged in to post a comment.
