Comments on: Automountd trying to connect to Backups.backupdb

By: Reb

Reb — Sat, 06 Feb 2010 18:18:40 +0000

Thank you LS, for Mac first line defense! And THANK YOU, all poster and supporters of this link!
I have searched in vain for LS equiv. on Windows XP or 7. I love the new PC hardware, and price…
but getting a Windows system is like renting instead of buying, and finding out the landlord is still advertising your address as open house .

LS is doors, latches, and locks, and soundproofing.

Liinks like this are peepholes and keys. I now feel secure again.
Thank you ALL.
Hope you find the metaphor more useful than the space it takes…
Reb

By: Userland User

Userland User — Sat, 30 Jan 2010 12:14:45 +0000

I got this message, too…right after updating to latest Little Snitch; the prior version of Snitch had mysteriously started ‘quitting unexpectedly’ at odd times, but only when I was connected to the Internet. That was spooky. The update to Snitch 2.2.1 seems to have fixed that issue, and as a bonus, enabled Snitch to discover the Automountd attempt, for the very first time.

Also spooky is the additional info in the Snitch window…”User ID 0 root”. To an average non-Unix-wise user like me, it sounds as if my ‘root’ user appears to be trying to do things while I’m actually logged in under my normal admin account.

By: personguy

personguy — Sat, 30 Jan 2010 03:28:41 +0000

running 10.5.7
got the same message from the snitchster.
at around 3am saturday morning jan 30.

never did run time machine. it’s completely off.
but i do have developer tools installed.

By: Dougit Design Blog » Blog Archive » Does your Apple notebook hard drive (HDD) ever sound like little mice are playing table tennis inside of it? Or, why your HDD might be pre-programmed for quick failure.

Thu, 03 Dec 2009 07:39:25 +0000

[...] now. I did do one system change, using Little Snitch, I denied allowing an outbound connection by automountd, which was trying to connect “UDP connections to port 111 (sunrpc) of [...]

By: Macs R We

Macs R We — Sat, 21 Nov 2009 17:12:38 +0000

“Solutions:… Leave your USB/firewire Time Machine backup drive attached to your Mac so that automountd can find it without having to ask DNS.”

I’m with Tesseract — my backup volume is connected, available, and TM has been using it, so I can’t fathom why my Mac OS is sneaking out to the internet to get a little something-something that it could easily get at home.

By: mystro

mystro — Sat, 14 Nov 2009 16:12:40 +0000

Just woke to my own LS warning.
Not using TM at all. Did have my Camera hooked but off all night.
It says, “Established by: user/libexec/automountd
I searched for “libexec” And found multiples in my Developer folder.
I do some dev for iphone, osx 10.5.8 apps and Screensavers via Developer tools. Not sure if this is anything but still.
Process ID was 19432 but that is not in my Activity monitor.

By: captain

captain — Sat, 03 Oct 2009 19:40:51 +0000

One solution would be to let this process do what it’s doing, but to block all traffic using port 111 at your gateway. Blocking traffic at the gateway is always a good ultimate line of defense.

By: Martin Pedder

Martin Pedder — Sat, 26 Sep 2009 02:48:14 +0000

Add me to the list of people with this problem.

By: Fuzzjohn

Fuzzjohn — Sat, 05 Sep 2009 02:41:10 +0000

Damn! I just got it too. thanks for the save little snitch. And I’m glad there are people with the same problem I wouldn’t have known what to do if this page wasn’t here probably would have allowed it.

By: ljocampo

ljocampo — Mon, 10 Aug 2009 12:43:10 +0000

Bill, It’s call to a DNS server. Usually the you use. I’ve researched the web and according to what I’ve found is that Time Machine is looking for its backup database and when it doesn’t find it, it ask the system to find it and the system can’t find it, it goes looking through DNS as if it was a domain. Even though I and others too don’t have TM enabled, it still happens. Many say it’s because your ISP is hijacking the 404, but I think it’s more than that and local to Leopard. No one seems to have an good answer to why Leopard is allowing an outside connection when no TM is setup. I’m still hoping to find out.

I believe this is a real security risk if someone hijacked your DNS server and then waited for this to happen to sent back malicious code. Deny it forever in Little Snitch and keep asking why.