Hi,
I regularly check my auth.log file. As of sometime this morning, or
sometime yesterday, all incoming connections are being shown as coming from
my own IP address. I have a fixed IP on cable with Telstra/Paradise, and
all of my own (known) incoming connections are showing up as coming from me!
e.g. from auth.log
Jun 13 09:32:10 virgo sshd[7662]: Connection from {my own IP address] port
44382
I have tested this by logging in from outside from a known IP address and
watching the logs, but the known IP address does not appear- it is replaced
with my own fixed cable IP.
I have run chkrootkit, and nothing was found. There is nothing odd I have
noticed about this system this morning (other than my own IP number in the
logs).
This is most disconcerting. Actually, looks like it started about 1800 on
Friday 10th June. Any clues?
Andy
