Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Fri, 29 Aug 2003 09:44:33 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Worrying openssh behaviour
Message-ID: <20030829074433.GD23784@cygbert.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <Pine DOT LNX DOT 4 DOT 55 DOT 0308290115530 DOT 7572 AT sauron DOT holgate DOT org DOT uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Pine.LNX.4.55.0308290115530.7572@sauron.holgate.org.uk>
User-Agent: Mutt/1.4.1i

On Fri, Aug 29, 2003 at 01:24:28AM +0100, Matt Holgate wrote:
> Hi,
> 
> I've had cygwin installed for a while on my Windows XP box and it's been
> great. However, today I installed a personal firewall (Kerio Personal
> Firewall to be exact) and I noticed some worrying behaviour with openssh.
> 
> When using the openssh client to connect to my linux box, it correctly
> opened a TCP connection to the server on port 22.
> 
> However, it also seemed to open a local socket for listening. On each key
> press, the ssh.exe process seemed to connect to itself, handle the
> keypress and open another socket on a different port to listen again.
> 
> This behaviour seems very strange and I was worried in case this might be
> a trojan or something? But it seems weird that it is listening on
> localhost and receiving connections from itself.

That's normal for any Cygwin process using AF_UNIX/AF_LOCAL sockets for
interprocess communication.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/