From owner-freebsd-security@FreeBSD.ORG  Mon Apr 19 02:59:34 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8355216A4CE
	for <freebsd-security@freebsd.org>;
	Mon, 19 Apr 2004 02:59:34 -0700 (PDT)
Received: from mxfep02.bredband.com (mxfep02.bredband.com [195.54.107.73])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A82AB43D39
	for <freebsd-security@freebsd.org>;
	Mon, 19 Apr 2004 02:59:33 -0700 (PDT)
	(envelope-from z3l3zt@hackunite.net)
Received: from mail.hackunite.net ([213.112.193.7] [213.112.193.7])
	by mxfep02.bredband.com with SMTP
	<20040419095932.BAMK9494.mxfep02.bredband.com@mail.hackunite.net>;
	Mon, 19 Apr 2004 11:59:32 +0200
Received: from 213.112.193.91
        (SquirrelMail authenticated user z3l3zt@hackunite.net)
        by mail.hackunite.net with HTTP;
        Mon, 19 Apr 2004 11:59:34 +0200 (CEST)
Message-ID: <2711.213.112.193.91.1082368774.squirrel@mail.hackunite.net>
In-Reply-To: <4083A0C2.3F86159E@kuzbass.ru>
References: <1998.213.112.193.35.1082212115.squirrel@mail.hackunite.net>
    <20040419021239.GA67288@blossom.cjclark.org>
    <4083A0C2.3F86159E@kuzbass.ru>
Date: Mon, 19 Apr 2004 11:59:34 +0200 (CEST)
From: "Jesper Wallin" <z3l3zt@hackunite.net>
To: "Eugene Grosbein" <eugen@kuzbass.ru>
User-Agent: SquirrelMail/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
cc: freebsd-security@freebsd.org
Subject: Re: Is log_in_vain really good or really bad?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: z3l3zt@hackunite.net
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Apr 2004 09:59:34 -0000

> "Crist J. Clark" wrote:
>>
>> On Sat, Apr 17, 2004 at 04:28:35PM +0200, z3l3zt@hackunite.net wrote:
>> [snip]
>>
>> > My server box is a Intel Celeron 733Mhz, 384Mb of RAM.. yet it's slow from
>> > time to time since I only run ATA66 due to the old motherboard. When this
>> > "attack" occured yesterday, the box almost died and the box were working
>> > 100%.. all users who were logged in got "spammed" since the default
>> > *.emerg in /etc/syslog.conf is set to "*" ..
>>
>> Not sure what that has to do with anything. The log_in_vain messages get
>> logged at "info" level. What messages were your users seeing?
>> --
>> Crist J. Clark                     |     cjclark@alum.mit.edu
>
> I believe that was a bug in syslogd and this bug is already fixed
> in both of CURRENT and STABLE for not so long.
>
> Eugene
>

Fixed you say.. I run FreeBSD 5.2.1-RELEASE-p5, yet it's there..


Regards,
Jesper Wallin