On Fri, 10 Sep 1999, Alan Cox wrote:
> Subject: Re: Who is trying to do what ?
>
> > Since a couple of days /var/log/secure of our firewall is reporting some starnge
> > messages like:
> >
> > Aug 25 03:07:34 www imapd[9092]: error: cannot execute /usr/sbin/imapd: No such
> > file or directory
> > Aug 25 03:07:39 www imapd[9093]: connect from dhcp9538066.columbus.rr.com
>
> They are trying to connect to the imap and pop3 services on your firewall
> which sensibly enough you don't have enabled. Those are breakin attempts
Actually, they are trying to connect to imap which you unsensibly have NOT
disabled in inetd.conf.
But since you haven't installed imapd on the firewall, inetd can't find
it, which is what it complains about.
You really need to go through your inetd.conf again, disabling everything
you don't absolutely need, as well as close all ports you don't explicitly
need in �our firewall rules.
--
Henrik Olsen, Dawn Solutions I/S URL=http://www.iaeste.dk/~henrik/
Orson Welles: Rosebud. (dies)
Reporter: What does it mean?
Everybody Else: We don't know.
Citizen Kane, the Movie-A-Minute version
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
