Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Nov 2003 16:23:16 -0500
From:      "Mohsin Rahman" <mtech@buffnet.net>
To:        "Kent Stewart" <kstewart@owt.com>, "Spades" <spades@galaxynet.org>, <freebsd-questions@freebsd.org>
Subject:   Re: Connection attempt to TCP messages in /var/log/messages
Message-ID:  <005d01c3b2d1$2cd8caa0$6213f6cd@mohsin>
References:  <20031124085442.9FCA36B5F7@jareth.dreamhost.com><001001c3b2be$cae743b0$fa10fea9@bryanuptrvb0jc> <200311241128.56354.kstewart@owt.com>

next in thread | previous in thread | raw e-mail | index | archive | help
sysctl -w net.inet.tcp.log_in_vain=1
sysctl -w net.inet.udp.log_in_vain=1

turns em on and

sysctl -w net.inet.tcp.log_in_vain=0
sysctl -w net.inet.udp.log_in_vain=0

turns them off. Hope this helps.

Anyone know how to add a time/date to this log entry and which file to
modify?

--
Mohsin Rahman
mtech@buffnet.net


----- Original Message ----- 
From: "Kent Stewart" <kstewart@owt.com>
To: "Spades" <spades@galaxynet.org>; <freebsd-questions@freebsd.org>
Sent: Monday, November 24, 2003 2:28 PM
Subject: Re: Connection attempt to TCP messages in /var/log/messages


> On Monday 24 November 2003 11:11 am, Spades wrote:
> > I did a tail -f /var/log/messages and got all these..
> >
> > previously before my cvs and recompile kernel to 4.9 stable
> > it didn't have below.. now it does..
> >
> > Nov 25 03:09:56 asia /kernel: Connection attempt to TCP
202.79.180.131:80
> > from 65.217.41.66:1681
> > Nov 25 03:09:58 asia /kernel: Connection attempt to TCP
202.79.180.130:80
> > from 24.136.234.77:4059
> >
> > question.. how to stop seeing them in /var/log/messages?
> >
>
> Buy a hardware firewall that you place in front of your computer. You
probably
> have a log option in your firewall and someone is trying to connect to
your
> web server. You could turn off logging but I like to know who is trying to
> connect to my systems. This is especially true when I am not running a
> service and they are probing to find out if I am.
>
> Kent
>
> -- 
> Kent Stewart
> Richland, WA
>
> http://users.owt.com/kstewart/index.html
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"
>





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?005d01c3b2d1$2cd8caa0$6213f6cd>