[SOLVED] Curious message on boot

[Wibble]

Had to reboot my Mandrake box (first time for ages). I was watching as it booted up and spotted a message that has me worried. It was an SMB share, trying to connect to an IP address I'd not seen, on port 445
Now, port 445 is the right port for SMB shares, and I DO have Samba running on it, but the IP address is one for a US based ISP.

Does anyone have an idea what this is, and how it got there?

Thanks in advance.

[happybunny]

is it possible that machine is doing a name lookup for the samba server and having it resolve to the server via the internet?

Also, check out /etc/fstab for how you are doing the mount at boot time.

[Wibble]

Why would it want to be doing a name lookup? It's not the ISP I'm using (I'm in the UK).

fstab is this:

/dev/hda1 / ext3 defaults 1 1
/dev/hda6 /home ext3 defaults 1 2
//homer/backup /mnt/backup smbfs credentials=/etc/samba/auth.homer.homer/alex 0 0
/dev/hdc /mnt/cdrom auto umask=0,user,iocharset=iso8859-15,codepage=850,noauto,ro,exec,users 0 0
none /mnt/floppy supermount dev=/dev/fd0,fs=ext2:vfat,--,umask=0,iocharset=iso8859-15,sync,codepage=850 0 0
none /proc proc defaults 0 0
/dev/hda5 swap swap defaults 0 0
/dev/hdb3 swap swap defaults 0 0

(homer being the name of my Win XP box)

[happybunny]

it was just a thought.

if you ping homer from client, what dns name does it get? If its homer.your.isp.com, then there is your "problem".

Check out your /etc/resolv.conf file or /etc/hosts to make sure your client and server are in the same domain.com.

[Wibble]

it was just a thought.

if you ping homer from client, what dns name does it get? If its homer.your.isp.com, then there is your "problem".

Check out your /etc/resolv.conf file or /etc/hosts to make sure your client and server are in the same domain.com.


Thanks for the help.
I've got a couple of DYNDns accounts. One of them is something.homedns.org. There is also a domain called homer.homedns.org and it is on the IP address I noticed. I added an entry into the hosts file and it works fine now.

Thanks for the help. I thought someone had somehow got into my server and was up to no good.

Panic over. Don't suppose you know much about Sendmail do you?