automountd, backups.backupdb & port 111

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Mike - 13 May 2008 21:48 GMT

I'm running 10.5.2 on a Mac Pro with Time Machine enabled.

Occasionally Little Snitch will alert me to auotomound wanting to make a
connection with backups.backupdb via port 111. I've allowed it but not
on a permanent basis.

I did some Googling and found that others have seen the same or a
similar message but none have pinpointed exactly what's going on.
Google led me to a January post on an Objective Development forum asking
about it, but there was only a "me too" post in reply. Both of those
posters were using OpenDNS as am I (much faster than cox.net).

Several posters on a thread at Macintouch seemed to believe that these
messages are ISPs redirecting to an alternate search page, but I can't
for the life of me see how Time Machine is related to that. And I don't
see it.

I'm not mounting any remote volumes such as Mac, NFS,or Samba shares.

Neither the console logs or firewall logs show anything that I think is
suspicious.

Can anyone shed any light on this?

Reply to this Message

Michael Vilain - 13 May 2008 22:13 GMT

> I'm running 10.5.2 on a Mac Pro with Time Machine enabled.
>
[quoted text clipped - 19 lines]
>
> Can anyone shed any light on this?

port 111 is the SUN remote procedure call service. If you've turned on
logging for your firewall via the System
Preferences>Sharing>Firewall>Advanced panel, you'll have the file
/var/log/ipfw.log that will have attempted hits on your machine. Turn
that on and wait a while until you see the Little Snitch complaint
again. Then you'll have the incoming IP address which you can take to
your ISP (if it's them) to tell they to "cease and desist unauthorized
access to your system".

Signature

DeeDee, don't press that button! DeeDee! NO! Dee...
[I filter all Goggle Groups posts, so any reply may be automatically by ignored]

Reply to this Message

Lawrance A. Schneider - 17 May 2008 17:45 GMT

> > I'm running 10.5.2 on a Mac Pro with Time Machine enabled.
> >
[quoted text clipped - 28 lines]
> your ISP (if it's them) to tell they to "cease and desist unauthorized
> access to your system".

I see no reference to Firewall in: System Preferences>Sharing> . I'm
using 10.5.2 .

Thanks Larry

Reply to this Message

Michelle Steiner - 17 May 2008 17:50 GMT

In article
<llaassllaass-E1BC09.12450017052008@softbank060082049208.bbtec.net>,

> I see no reference to Firewall in: System Preferences>Sharing> . I'm
> using 10.5.2 .

In 10.5, it's in System Preferences>Security.

Signature

Support the troops: Bring them home ASAP.

Reply to this Message

Mac Forum / General / General / May 2008

automountd, backups.backupdb & port 111