Have I been invaded?

Was checking on my MBP's Security> Firewall settings which I had set to "Set access for specific services and applications". Noticed that Safari and System Preferences have been added. I don't remember adding them. So I checked the log and found maybe 3 pages of entries just for today and yesterday with the first entry saying "logfile turned over due to size>100K".
Why would Safari and System Prefs be allowing incoming connections?
Also, that seemed like a lot of entries for just two days. Then I noticed that the entires are from only two sources. Both report that someone or something is listening, with a slight variation in the wording.
I hope I'm not providing secure info here but here are examples of the entries from each of the listeners:
Nov 13 22:09:25 Eds-MacBook-Pro Firewall[48]: cupsd is listening from fe80::1:631 uid = 0 proto=6
Nov 13 22:09:27 Eds-MacBook-Pro Firewall[48]: krb5kdc is listening from :::88 uid = 0 proto=6
Nov 13 22:09:27 Eds-MacBook-Pro Firewall[48]: krb5kdc is listening from 0.0.0.0:88 uid = 0 proto=6
The "cupsd" entires are all the same and except for the variations shown above so are the "krb5kdc".
So, am I in trouble? Who are these listeners and what are they listening for?
I have now blocked Safari and System Prefs from receiving incoming connections.
Thanks,
Ed

I wouldn't worry about either, and I'd unblock them too or you may find things start to not work.
cupsd is part of the printing system (are you attaching to a network printer at all?)
krb5kdc...
Kerberos version 5 Authentication Service and Key Distribution Center
"Kerberos 5 is a trusted third-party authentication system. This script starts and stops the server that Kerberos IV and 5 clients need to connect to in order to obtain credentials."
Layman - It is a normal part of a Unix or Linux installation and is used as a method to authenticate accounts for access to some network services. It doesn't harm you to leave it on in case you need to connect to a server at work.
Quoted from [here|http://discussions.apple.com/message.jspa?messageID=6739752#6739752].
As it says in that other thread... Google is your friend

Similar Messages

Maybe you are looking for

  • I`m getting a saffire pro 40,and want to know what and how to turn anything I dont`t need to have running on my 2011 Macbook Pro

    I plan to do some simple live recording ( 6 or 7 simultaneous tracks,and possibly add a few more later ) I want to keep my machine running smooth with the least amount of competition for resources while recording. Any tips and info on what and how to

  • Lrcat files much smaller in LR6???

    Should I be worried? My LR preview files are substantially smaller after the LR update/conversion. Just flipping through them, I can't find any problem but is this size reduction "normal" and are you all seeing it? Just fyi, I have about 160k files a

  • Modify DataSource to include new fields from view

    Hello all, I have been tasked to bring new fields into a DataSource from a view. The new required fields are in the table and view below the DataSource. How do I update the DataSource to recognize the new fields in the view? I am pretty sure I just n

  • Exception in method createStatement() of java.sql.Connection

    Hi, When creating a statement : Statement stat = conn.createStatement(); I got this error: java.lang.NegativeArraySizeExceptionoracle.net.ano.CryptoDataPacket.decryptAndChecksum(CryptoDataPacket) oracle.net.ano.CryptoDataPacket.<init>(CryptoDataPacke

  • Private strand flush not complete

    hi, I have installed oracle 10.2.0 installed and i have configured rman daily backup on it. But i got some entries in my alert log like. Mon Sep 15 03:55:18 2008 Thread 1 cannot allocate new log, sequence 416 Private strand flush not complete   Curre