Go Back   MacRumors Forums > Apple Systems and Services > Mac Basics and Help

Reply
 
Thread Tools Search this Thread Display Modes
Old Apr 13, 2008, 12:06 PM   #1
Lordillingworth
macrumors regular
 
Join Date: Nov 2007
Location: Shropshire, UK
Firewall log... what and who is this listening?

I was taking a look in the firewall log of my mac last night and there were all sorts of 'Stealth mode connection attempt' but then repeated here and there throughout the log there was the message

'krb5kdc is listening from 0.0.0.0:88 uid = 0 proto=6'

I have no idea who or what that is, i have tried googling it and only come up with pages of jargon that i don't understand, could somebody please tell me if this is a good or bad sign, is it an apple program or something sinister?

Please help as this is very disturbing!

thanks,
Lordillingworth is offline   0 Reply With Quote
Old Apr 13, 2008, 03:56 PM   #2
chriscl
macrumors 6502
 
Join Date: Jan 2008
Location: Nottingham, England
From that name, if I had to guess, I would think it would be something to do with kerberos authentication - possibly the service for managing kerberos keys?

If you wanted to connect to Windows shares, you would need to use SMB components (Windows use SMB/CIFS for its file shares) and the authentication for those is handled by kerberos.

In this case, I'm not surprised you'd see a kerberos app - I don't think it's anything to worry about!
__________________
Chris
some stuff with an logo on them.
chriscl is offline   0 Reply With Quote
Old Apr 13, 2008, 04:01 PM   #3
steveza
macrumors 65816
 
steveza's Avatar
 
Join Date: Feb 2008
Location: UK
Kerberos Authentication (version) 5 Key Distribution service.

As chriscl said this is normally related to Windows domain authentication but it is used for other things to. Do you connect to corporate networks for anything?
steveza is offline   0 Reply With Quote
Old Apr 14, 2008, 10:09 AM   #4
Lordillingworth
Thread Starter
macrumors regular
 
Join Date: Nov 2007
Location: Shropshire, UK
Hello, thanks for the replies,

I am not connect to any other computers in a network.

I use wifi from a wireless router that was initially set up using a windows computer if that has any effect on matters?!

The only windows application that i am aware that i am using is messenger for mac.

I do use flip4mac aswell

I can't think of anything else windows related that has any connection in any way to the mac.

Thanks again for the help.
Lordillingworth is offline   0 Reply With Quote
Old Apr 14, 2008, 11:26 AM   #5
joegomolski
macrumors 6502
 
Join Date: Apr 2006
Location: So CA
I installed the demo version of Little Snitch, and I was appalled to see the number of servers wanting to log onto my system.

Little Snitch informs me of these "intrusions" I can then choose to accept the connection, or deny it.

Many of the login attempts are by credit reporting agencies, and I don't want them having access to my system.
__________________
iPhone 4 32GB, iPad 3G WiFi 64GB, Mac Pro, MacBook Pro late 2008, a couple of Mac Mini's; a MacBook Air 1.8/SSD, Rev B; Dual 30" Cinema Displays.
joegomolski is offline   0 Reply With Quote
Old Apr 14, 2008, 11:38 AM   #6
KD7IWP
macrumors 6502a
 
KD7IWP's Avatar
 
Join Date: Mar 2004
Location: American living in Canada
Send a message via AIM to KD7IWP
wow... Credit reporting agencies? May I ask how you figured out who it was?
__________________
2.66Ghz Quad Nehalem Mac Pro; 16gb iPhone 4; 30GB 5G iPod; 512mb iPod Shuffle.
KD7IWP is offline   0 Reply With Quote
Old Apr 14, 2008, 11:43 AM   #7
Morod
macrumors 65816
 
Join Date: Jan 2008
Location: On The Nickel, over there....
Where is the firewall log?

After reading this thread, I got curious about what would be in my firewall log. I went to SYS PREF>SECURITY>FIREWALL, but could not find a log. I opened Finder and did a search, no log there either. So, where is it? Thanks for the help!
Morod
__________________
Everything should be made as simple as possible, but not simpler.
Albert Einstein

Last edited by Morod; Apr 14, 2008 at 11:43 AM. Reason: Spelling
Morod is offline   0 Reply With Quote
Old Apr 14, 2008, 12:55 PM   #8
joegomolski
macrumors 6502
 
Join Date: Apr 2006
Location: So CA
Quote:
Originally Posted by KD7IWP View Post
wow... Credit reporting agencies? May I ask how you figured out who it was?
I figured it out by using Little Snitch.

Little Snitch tells me, through a popup box, the identity of the server wanting access to my Mac.

Most of the time, the servers wanting access to my Mac, are credit reporting agencies.

Little Snitch tells me this, this program is definitely a must have for me.

They have a demo, try it out and see for yourself.
__________________
iPhone 4 32GB, iPad 3G WiFi 64GB, Mac Pro, MacBook Pro late 2008, a couple of Mac Mini's; a MacBook Air 1.8/SSD, Rev B; Dual 30" Cinema Displays.
joegomolski is offline   0 Reply With Quote
Old Apr 14, 2008, 02:27 PM   #9
merl1n
macrumors 65816
 
merl1n's Avatar
 
Join Date: Mar 2008
Location: New Jersey, USA
Quote:
Originally Posted by Morod View Post
After reading this thread, I got curious about what would be in my firewall log. I went to SYS PREF>SECURITY>FIREWALL, but could not find a log. I opened Finder and did a search, no log there either. So, where is it? Thanks for the help!
Morod
System Prefs -> Security -> Firewall Tab. If you have it turned off (Allow all incoming traffic) than your firewall is not enabled. If you enable it by selecting one of the other options, the "Advanced Tab" will be enabled. Click that and you can enable logging and view the log from there.
__________________
Merl1n
MBP 15" 2.33GHZ, MacMini 2.0GHZ, PBG4 15" 1.67GHZ, PBG4 12" 1.5GHZ, iPodTouch 32GB
merl1n is offline   0 Reply With Quote
Old Apr 14, 2008, 04:48 PM   #10
Morod
macrumors 65816
 
Join Date: Jan 2008
Location: On The Nickel, over there....
Thanks for the info! My problem is I generally use a standard account when using OS X, and the "Advanced" tab was grayed out. I need to use my Admin account to look through the log, or the box states, "You do not have permission to view this log."
Morod
__________________
Everything should be made as simple as possible, but not simpler.
Albert Einstein
Morod is offline   0 Reply With Quote
Old Apr 15, 2008, 06:58 PM   #11
Lordillingworth
Thread Starter
macrumors regular
 
Join Date: Nov 2007
Location: Shropshire, UK
Right then, i have just gone to 'sharing' in 'preferences' and disabled file sharing... why it was enabled i am not sure as i don't have anything i would want to stick on another computer!

I will see if that has something to do with this kerberos weird thing in the log, i will wait a day or two and see if it has appeared then and post back with my findings!
Lordillingworth is offline   0 Reply With Quote

Reply
MacRumors Forums > Apple Systems and Services > Mac Basics and Help

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Post what you are listening to! Destroysall Picture Gallery 822 Nov 27, 2014 09:42 AM
Log Book Buddy released - log book app for learner drivers MythicFrost iPhone and iPod touch Apps 0 Mar 6, 2013 11:06 PM
App Store crashes when I log in or log out echo.park OS X 10.8 Mountain Lion 1 Aug 3, 2012 01:52 PM

Forum Jump

All times are GMT -5. The time now is 03:53 AM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC