users will telnet; login screen will appear after almost a minute
delay and after logging in the username and password, there is
another delay. Remote disconnection will occur afterwards.
I examined /var/log/messages.log and there are several entries with
the following:
telnetd[21893]: ttloop: peer died: EOF
inetd[527]: pid 21893: exit status 1
Here are the things I did to try to solve the problem:
- restarted inetd
- stopped and started inetd
- restarted the server (seems to be not a good idea)
- refreshed telnet-server rpm
- removed and re-installed telnet-server rpm
nothing seems to work.
then in the logs, I noticed the following entry:
telnet/tcp server failing (looping or being flooded), service
terminated for 10 minutes...
in short the telnet server is being flooded; a sort of denial-of-service
attack but by whom I don't know... perhaps it's the number of
users trying to login all at the same time... or maybe it is being
done on purpose... that's just a guess anyway...
does anyone know what is happenning? and what action should be taken.
thanks in advance.
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
