Re: Accepted password in auth.log
- From: Tobin Lichtenfeld <tlichte23@xxxxxxxxxx>
- Date: Fri, 25 Jun 2010 09:51:35 +0200
I'm sure you said you'd blocked access from the InternetAbsolutely!
To do administrative work on the router, I need to connect via SSH to the server (port forwarding on router) and tunnel to a squid proxy server there. I can then connect to the internal IP address of the router.
can think of connections being logged as coming from your router is ifI know. But I don't think that's what happened here. I do not think that this is necessarily a hacker. Just some weird situation where the router did not keep the original source IP address.. but I want to be sure and so I am looking for a way to replicate the situation.
someone logged into your router and then your internal machine.
Probably not the case at all but it's the simplest explanation.
Tobin
.
- References:
- Accepted password in auth.log
- From: Tobin Lichtenfeld
- Re: Accepted password in auth.log
- From: someone
- Re: Accepted password in auth.log
- From: Tobin Lichtenfeld
- Re: Accepted password in auth.log
- From: someone
- Re: Accepted password in auth.log
- From: Nrth
- Accepted password in auth.log
- Prev by Date: Re: Accepted password in auth.log
- Next by Date: Fast And Free Web Proxies
- Previous by thread: Re: Accepted password in auth.log
- Next by thread: Re: Accepted password in auth.log
- Index(es):
Relevant Pages
|