Is it hack? How to prevent!

fbsd_user fbsd_user at
Sat Feb 25 12:45:55 PST 2006

What this means is you have no firewall blocking
the port numbers those services use.

Or you really do have mysql, and SSH installed and people are
trying to remotely login and your box is doing its job of
denying the unauthorized login attempt.

But my money is on the firewall.
You have none or it's rules are not correct.

Read the firewall section of the FreeBSD handbook and
use the ipfilter example rule set.

As an after though, 4.8 is an unsupported system
and 6.0 is the current production version.
Time to upgrade by installing from scratch 6.0.

Give the Install Guide at a look.

-----Original Message-----
From: owner-freebsd-questions at
[mailto:owner-freebsd-questions at]On Behalf Of The Happy
Sent: Saturday, February 25, 2006 10:46 AM
To: freebsd-questions at
Subject: Is it hack? How to prevent!

Hello everyone,

    I'm on freebsd 4.8R acting as a webserver and email server, I keep
    In my /var/log/messages a strange 3 type of messages,

   mysqld[8541]: error: /etc/hosts.allow, line 212: twist option in
   last message repeated 73 times

  inetd[50977]: warning: /etc/hosts.allow, line 25: host name/address
mismatch: !=

  sshd[40712]: warning: /etc/hosts.allow, line 25: can't verify
getaddrinfo(na-163-, AF_INET) failed
  (I keep getting differnt host everytime)

  about messages 2 and 3 i think its some hacks attempts How i can
this type of
  access? unmatched IPs?

  what about messages number 1? what doest mean is it hack attempt?

  My logs are full of these messages, please help
  Note line 25 in /etc/hosts.allow is ALL : : deny and has
nothing to do with these logs
  its just the first rule in the file.

  Thank you in advance.


Express yourself instantly with MSN Messenger! Download today it's

freebsd-questions at mailing list
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at"

More information about the freebsd-questions mailing list