Is it hack? How to prevent!
fbsd_user at a1poweruser.com
Sat Feb 25 12:45:55 PST 2006
What this means is you have no firewall blocking
the port numbers those services use.
Or you really do have mysql, and SSH installed and people are
trying to remotely login and your box is doing its job of
denying the unauthorized login attempt.
But my money is on the firewall.
You have none or it's rules are not correct.
Read the firewall section of the FreeBSD handbook and
use the ipfilter example rule set.
As an after though, 4.8 is an unsupported system
and 6.0 is the current production version.
Time to upgrade by installing from scratch 6.0.
Give the Install Guide at www.a1poweruser.com a look.
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of The Happy
Sent: Saturday, February 25, 2006 10:46 AM
To: freebsd-questions at freebsd.org
Subject: Is it hack? How to prevent!
I'm on freebsd 4.8R acting as a webserver and email server, I keep
In my /var/log/messages a strange 3 type of messages,
mysqld: error: /etc/hosts.allow, line 212: twist option in
last message repeated 73 times
inetd: warning: /etc/hosts.allow, line 25: host name/address
mismatch: 18.104.22.168 !=
sshd: warning: /etc/hosts.allow, line 25: can't verify
219.na.avantel.net.mx, AF_INET) failed
(I keep getting differnt host everytime)
about messages 2 and 3 i think its some hacks attempts How i can
this type of
access? unmatched IPs?
what about messages number 1? what doest mean is it hack attempt?
My logs are full of these messages, please help
Note line 25 in /etc/hosts.allow is ALL : .temma.net : deny and has
nothing to do with these logs
its just the first rule in the file.
Thank you in advance.
Express yourself instantly with MSN Messenger! Download today it's
freebsd-questions at freebsd.org mailing list
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions