Re: strange　log

From: Michael S Scheidell (scheidell@Cerintha.com)
Date: 04/26/01 

Date: Thu, 26 Apr 2001 08:22:35 -0400 (EDT)
From: Michael S Scheidell <scheidell@Cerintha.com>
To: freebsd-security@freebsd.org

In local.freebsd.security, you wrote:
>Hello.
>
>I would be very glad if anyone could help me.
>I found a weird storange log in /var/log/message like this ...
>
> Apr 20 00:02:25 do0 inetd[81102]: refused connection from unknown, service
> ftpd (tcp)

>
>How can i find out "unknown" ??
>Thank you.
>
>

edit /etc/hosts.allow

make sure the default 'fall through' is something like this:

# The rest of the daemons are protected.
ALL : ALL \
        : severity auth.info \
        : twist /bin/echo "You are not welcome to use %d from %h[%a]."

not just
ALL: ALL : deny

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message