From: dwhodgins@nomail.afraid.org   
      
   On Sun, 30 Sep 2012 20:04:03 -0400, Moe Trin  wrote:   
      
   > On Sun, 30 Sep 2012, in the Usenet newsgroup alt.os.linux.mandriva, in   
   article   
   > , Adam wrote:   
      
   >> 00:21:58.308752 IP 192.168.1.24.5353 > 224.0.0.251.5353: 0 PTR (QM)?   
   >> 116.188.70.217.in-addr.arpa. (45)   
   >   
   >> three times, but no response back from 224.0.0.251 (or anything else   
   >> that looks unusual to me).  Any idea which app is sending that query?   
   >   
   > That's "avahi" and this is demonstrating one of the major security   
   > holes from those klownes.  That's not a local address, and Avahi has   
   > no business asking for it. The application you need to disable is   
   > "avahi-daemon".   
      
   Nitpick. 224/4 (i.e. 224.0.0.0 to 239.255.255.255) are multicast   
   addresses, not public addresses. RFC 5771   
      
   http://en.wikipedia.org/wiki/Multicast_address   
      
   Regards, Dave Hodgins   
      
   --   
   Change nomail.afraid.org to ody.ca to reply by email.   
   (nomail.afraid.org has been set up specifically for   
   use in usenet. Feel free to use it yourself.)   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)