Re: Problem with logs

2007-09-13 Thread Aldisa Admin
Hello Derek, I don't use hosts.allow. I use the AllowUsers directive in the sshd.conf file to limit the actual username/ip combinations. As a rule, I also close port 22 on the router. When I need external access (e.g. when I am travelling) I will open some other port and have sshd Listen

Problem with logs

2007-09-12 Thread Aldisa Admin
Hello All, I am having trouble understanding what is going on and how to solve the problem: For the last few days, I am getting the following messages (some names removed for privacy) in the daily security run output: [hostname].ca login failures: Sep 11 10:36:52 server su: BAD SU abid to

Re: Problem with logs

2007-09-12 Thread Derek Ragona
At 08:14 AM 9/12/2007, Aldisa Admin wrote: Hello All, I am having trouble understanding what is going on and how to solve the problem: For the last few days, I am getting the following messages (some names removed for privacy) in the daily security run output: [hostname].ca login

Re: Problem with logs

2007-09-12 Thread Aldisa Admin
Hello Denis, I am using FreeBSD 6.1-RELEASE. You have correctly identified the problem. My log files are small as well, and the entries in the daily security relate to the previous year. Thank you for your help...it has put my mind to rest. Abid On 12-Sep-07 1:29 PM, Denis wrote: I had such

Re: Problem with logs

2007-09-12 Thread Denis
I had such problem with FreeBSD 4.7, and finally discovered that this records were for the last year. My auth.log was pretty small and contain records for more than one year. And daily security included records for the last year. May this could be applied to you? Best regards, Denis. On 9/12/07,

Security Problem (?): strange logs

2003-02-21 Thread P. U. Kruppa
Hi, browsing my /var/log directory I found many files like these - (...) log.Ä__îÅÍ3 log._ç___Ä log.a0035934 log.aditi log.alevrius_ log.alevrius_.old log.amanda log.amd log.amul log.andreas log.ang_1730 log.angelas log.aps-02 log.armoire log.atpvpn

Re: *****SPAM***** Security Problem (?): strange logs

2003-02-21 Thread f.johan.beisser
On Fri, 21 Feb 2003, P. U. Kruppa wrote: Do I have any serious security problem, or are these some script kiddies ? those are output logs from samba. people are connecting, and trying to see any of your smb shares. ---/ f. johan beisser /--+

Re: Security Problem (?): strange logs

2003-02-21 Thread Bill Moran
P. U. Kruppa wrote: Hi, browsing my /var/log directory I found many files like these - (...) log.?__???3 snip log.ibm all in one -- Most of them are empty, some of them contain messages like this

Re: Security Problem (?): strange logs

2003-02-21 Thread Dan Nelson
In the last episode (Feb 21), P. U. Kruppa said: browsing my /var/log directory I found many files like these - (...) log.__3 log. log.a0035934 log.aditi log.alevrius_ log.alevrius_.old log.amanda Do I have any serious security problem,