On Fri, Oct 16, 2015 at 03:37:57PM +0300, Valentin Nechayev wrote:

>  Fri, Oct 16, 2015 at 15:29:48, slw wrote about "Re: [freebsd] sendmail + 
> roundcube": 
> 
> > > А ведь для 95% линуксово-фрибздишных тазиков вместо sendmail'ов
> > > достаточно было бы комбинации логин+пароль+сервер для условного gmail,
> > > чтобы отправлять кроновые отчёты на него, не заботясь о всяких
> > > FEATURE(masquerade_envelope).
> > 
> > да пихали бы сразу в какое гноилище, кто их эти отчеты вообще читает?
> > настроили фильтрацию в папку и никогда не смотрят.
> 
> Я читаю. Сюрприз:)
> Хотя бы чтобы знать, когда дырявые пакеты апгрейдить.
> А ещё там многие проблемы видны до перехода в фаталити.

я бы предпочел что бы за меня их читал скрипт.
потому что смысла тратить свое время на чтение нижеследующего я не вижу:

Disk status:
Filesystem                       Size    Used   Avail Capacity  Mounted on
zroot/ROOT                       2.1T    855M    2.1T     0%    /
devfs                            1.0K    1.0K      0B   100%    /dev
tmpfs                            1.8G    101M    1.7G     6%    /tmpfs
zroot                            2.1T    136K    2.1T     0%    /ZROOT
zroot/tmp                        2.1T    553M    2.1T     0%    /tmp
zroot/usr                        2.1T    2.5G    2.1T     0%    /usr
zroot/usr/local                  2.4T    320G    2.1T    13%    /usr/local
zroot/usr/obj                    2.1T    3.8G    2.1T     0%    /usr/obj
zroot/usr/ports                  2.1T    1.1G    2.1T     0%    /usr/ports
zroot/usr/ports/distfiles        2.1T    489M    2.1T     0%    
/usr/ports/distfiles
zroot/usr/ports/packages         2.1T    7.0M    2.1T     0%    
/usr/ports/packages
zroot/usr/src                    2.1T    3.6G    2.1T     0%    /usr/src
zroot/var                        2.1T    571M    2.1T     0%    /var
zroot/var/crash                  2.1T    148K    2.1T     0%    /var/crash
zroot/var/db                     2.1T    3.9G    2.1T     0%    /var/db
zroot/var/db/pkg                 2.1T     66M    2.1T     0%    /var/db/pkg
zroot/var/empty                  2.1T    144K    2.1T     0%    /var/empty
zroot/var/log                    2.1T    951M    2.1T     0%    /var/log
zroot/var/mail                   2.1T    148K    2.1T     0%    /var/mail
zroot/var/run                    2.1T    428K    2.1T     0%    /var/run
zroot/var/tmp                    2.1T    908K    2.1T     0%    /var/tmp
zroot/www                        2.1T    192K    2.1T     0%    /www
zroot/www/dev0                   2.1T    1.4G    2.1T     0%    /www/dev0
zroot/www/dev1                   2.1T    1.4G    2.1T     0%    /www/dev1
zroot/www/dev2                   2.1T    1.4G    2.1T     0%    /www/dev2
zroot/www/dev3                   2.1T    1.4G    2.1T     0%    /www/dev3
zroot/www/dev4                   2.1T    1.4G    2.1T     0%    /www/dev4
zroot/www/komandirovka           2.9T    812G    2.1T    27%    
/www/komandirovka
zroot/var/spool                  2.1T     17G    2.1T     1%    /var/spool
zroot/poudriere                  2.1T    128K    2.1T     0%    /ZROOT/poudriere
zroot/poudriere/data             2.1T    195M    2.1T     0%    /poudriere/data
zroot/poudriere/jails            2.1T    128K    2.1T     0%    
/ZROOT/poudriere/jails
zroot/poudriere/jails/10amd64    2.1T    820M    2.1T     0%    
/poudriere/jails/10amd64
zroot/poudriere/ports            2.1T     96K    2.1T     0%    
/ZROOT/poudriere/ports
zroot/poudriere/ports/default    2.1T    1.2G    2.1T     0%    
/poudriere/ports/default
DB                               844G     96K    844G     0%    /DB
DB/var                           844G     96K    844G     0%    /DB/var
DB/var/db                        844G     96K    844G     0%    /DB/var/db
DB/var/db/mysql                  899G     55G    844G     6%    /var/db/mysql
DB/var/db/mysql/MyISAM           844G     96K    844G     0%    
/var/db/mysql/MyISAM
DB/var/db/mysql/innodb-logs      844G    128M    844G     0%    
/var/db/mysql/innodb-logs

c1426.colo.hc.ru ipfw denied packets:
+++ /tmp/security.Rs1jCTcl      2015-10-15 13:39:47.696736237 +0300
+00200   3067081     183759716 deny tcp from table(101) to me dst-port 80
+65535   7555652     769351039 deny ip from any to any

c1426.colo.hc.ru login failures:
Oct 14 00:05:31 c1426 sshd[33110]: Invalid user admin from 62.210.7.49
Oct 14 00:05:31 c1426 sshd[33110]: input_userauth_request: invalid user admin 
[preauth]
Oct 14 00:05:32 c1426 sshd[33110]: Postponed keyboard-interactive for invalid 
user admin from 62.210.7.49 port 60517 ssh2 [preauth]
Oct 14 00:05:32 c1426 sshd[33110]: error: PAM: authentication error for illegal 
user admin from 62-210-7-49.ggsmarket.net
Oct 14 00:05:32 c1426 sshd[33110]: Failed keyboard-interactive/pam for invalid 
user admin from 62.210.7.49 port 60517 ssh2
Oct 14 01:16:55 c1426 sshd[52685]: reverse mapping checking getaddrinfo for 
62-210-27-92.rev.poneytelecom.eu [62.210.27.92] failed - POSSIBLE BREAK-IN 
ATTEMPT!
Oct 14 01:16:55 c1426 sshd[52685]: Invalid user admin from 62.210.27.92
Oct 14 01:16:55 c1426 sshd[52685]: input_userauth_request: invalid user admin 
[preauth]
Oct 14 01:16:55 c1426 sshd[52685]: Postponed keyboard-interactive for invalid 
user admin from 62.210.27.92 port 60780 ssh2 [preauth]
Oct 14 01:16:56 c1426 sshd[52685]: error: PAM: authentication error for illegal 
user admin from 62.210.27.92
Oct 14 01:16:56 c1426 sshd[52685]: Failed keyboard-interactive/pam for invalid 
user admin from 62.210.27.92 port 60780 ssh2
Oct 14 01:24:25 c1426 sshd[54319]: reverse mapping checking getaddrinfo for 
62-210-27-92.rev.poneytelecom.eu [62.210.27.92] failed - POSSIBLE BREAK-IN 
ATTEMPT!
Oct 14 01:24:25 c1426 sshd[54319]: input_userauth_request: invalid user uucp 
[preauth]
Oct 14 01:24:26 c1426 sshd[54319]: Postponed keyboard-interactive for invalid 
user uucp from 62.210.27.92 port 65444 ssh2 [preauth]
Oct 14 01:24:26 c1426 sshd[54319]: error: PAM: authentication error for illegal 
user uucp from 62.210.27.92
Oct 14 01:24:26 c1426 sshd[54319]: Failed keyboard-interactive/pam for invalid 
user uucp from 62.210.27.92 port 65444 ssh2
Oct 14 01:24:38 c1426 sshd[54323]: reverse mapping checking getaddrinfo for 
62-210-27-92.rev.poneytelecom.eu [62.210.27.92] failed - POSSIBLE BREAK-IN 
ATTEMPT!
Oct 14 01:24:38 c1426 sshd[54323]: Invalid user support from 62.210.27.92
Oct 14 01:24:38 c1426 sshd[54323]: input_userauth_request: invalid user support 
[preauth]
Oct 14 01:24:38 c1426 sshd[54323]: Postponed keyboard-interactive for invalid 
user support from 62.210.27.92 port 65505 ssh2 [preauth]
Oct 14 01:24:38 c1426 sshd[54323]: error: PAM: authentication error for illegal 
user support from 62.210.27.92
Oct 14 01:24:38 c1426 sshd[54323]: Failed keyboard-interactive/pam for invalid 
user support from 62.210.27.92 port 65505 ssh2
Oct 14 01:24:45 c1426 sshd[54329]: reverse mapping checking getaddrinfo for 
62-210-27-92.rev.poneytelecom.eu [62.210.27.92] failed - POSSIBLE BREAK-IN 
ATTEMPT!
Oct 14 01:24:45 c1426 sshd[54329]: Invalid user ubnt from 62.210.27.92
Oct 14 01:24:45 c1426 sshd[54329]: input_userauth_request: invalid user ubnt 
[preauth]
Oct 14 01:24:45 c1426 sshd[54329]: Postponed keyboard-interactive for invalid 
user ubnt from 62.210.27.92 port 49359 ssh2 [preauth]
Oct 14 01:24:46 c1426 sshd[54329]: error: PAM: authentication error for illegal 
user ubnt from 62.210.27.92

Ответить