Sounds like definetly the tripwire. Open the telnet port and see what happens. :D Give permissions from only localhost to connect it.
>What makes things run automatically on a Linux system? Cron does that for example. Chack "man cron" and "info cron". Regards:Antti. -----Original Message----- From: Mark Seven Smith [mailto:[EMAIL PROTECTED]] Sent: 5. joulukuuta 2001 10:25 To: [EMAIL PROTECTED] Subject: Re: "Mail for Root" On Tuesday 04 December 2001 01:42 pm, you wrote: <SNIP!> > > What alert program are you using? I have no idea! And I don't know how to find out...this is all what came set up...I DID run something to start something called "tripwire" (and now I'm sorry)...a mail came as soon as I booted RH7.1 for the very first time after installing, and told me to run "tripwire --init" or whatever, so I did. But I didn't do anything else; these just started coming for no reason (well, no reason that_I_ I can see! ;-) > It looks to me like > some program (possibly the alert program) is trying to > telnet to localhost. Either that, or someone is trying to break into the system? But it says that the "connection [was] refused"...anyway, what the heck can I do to trace down this problem? What makes things run automatically on a Linux system? Where does it have the files to configure this? I know it's something easy, but the ol' grey cells are getting scarce these days... :-) --mVIIs _______________________________________________ Seawolf-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/seawolf-list ########################################### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. _______________________________________________ Seawolf-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/seawolf-list