Date: Thu, 18 Nov 2004 20:43:43 +1300 From: Jonathan Chen <jonc@chen.org.nz> To: Gerard Samuel <fbsd-questions@trini0.org> Cc: freebsd-questions <freebsd-questions@freebsd.org> Subject: Re: Do I need to worry about these logs? Message-ID: <20041118074343.GC92397@grimoire.chen.org.nz> In-Reply-To: <419A5FC0.9070307@trini0.org> References: <419A5FC0.9070307@trini0.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Nov 16, 2004 at 03:14:56PM -0500, Gerard Samuel wrote:
> This is a fresh install of 5.3 from last week.
> Granted the script-kiddies has been working to break in via ssh,
> when I was running 4.10, I've never seen these types of logs before.
> Any clues, would be appreciated.
> Thanks.
>
> -- snip of /var/logs/auth.log --
> Nov 16 09:06:56 hivemind sshd[7611]: reverse mapping checking
> getaddrinfo for 203-150-17-44.inter.net.th failed - POSSIBLE BREAKIN
Just means that the reverse-DNS entry for the incoming ssh connection
hasn't been configured correctly.
--
Jonathan Chen <jonc@chen.org.nz> Once is dumb luck.
Twice is coincidence.
Three times and Somebody Is Trying To Tell You Something.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041118074343.GC92397>