sshd/mysql errors.

fbsd fbsd at a1poweruser.com
Tue Jul 4 10:58:24 UTC 2006


First thoughts is you are under attack and hosts.allow is
doing it's job of denying access.

Add the ip address from the warning message to your firewall
to stop those attack packets from entering your system.

Good chance attack packets are spoofed.



-----Original Message-----
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of Marwan
Sultan
Sent: Tuesday, July 04, 2006 6:40 AM
To: freebsd-questions at freebsd.org
Subject: sshd/mysql errors.


Hello gurus,

my logs full of hundreds of these lines..i starts since few days and
up to
day ..

---------
Jul  2 00:00:03 server mysqld[28598]: warning: /etc/hosts.allow,
line 25:
can't verify hostname: getaddrinfo(host73.hostname_net, AF_INET)
failed

Jul  2 00:00:27 server sshd[83738]: warning: /etc/hosts.allow, line
25:
can't verify hostname: getaddrinfo(host73.hostname_net, AF_INET)
failed
----------
Where hostname_net is the former ISP name for the my server hosting
ISP.
but i have the same DNS and routings, the name is changed since
almost 1
year and few months.

Also line 25 had nothing to do with this hostname its just the first
active
line in my hosts.allow file
anyhow i have replaced the line to:
ALL : .hostname_net : allow

But still same errors everyday every minute! anyadvise please?

Its FreeBSD 4.8R

thank you
Marwan

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's
FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"



More information about the freebsd-questions mailing list