From owner-freebsd-questions  Fri Mar  9  6:22:48 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from be-well.ilk.org (lowellg.ne.mediaone.net [24.147.184.128])
	by hub.freebsd.org (Postfix) with ESMTP id 286AD37B719
	for <freebsd-questions@freebsd.org>; Fri,  9 Mar 2001 06:22:45 -0800 (PST)
	(envelope-from lowell@be-well.ilk.org)
Received: (from lowell@localhost)
	by be-well.ilk.org (8.11.3/8.11.3) id f29EMVh09880;
	Fri, 9 Mar 2001 09:22:31 -0500 (EST)
	(envelope-from lowell)
To: freebsd-questions@freebsd.org, jason@jason-n3xt.org
Subject: Re: Logging log-ins/Security Question
References: <ICEEIHNIIMPDELNLPAGPOEHLCAAA.jason@jason-n3xt.org>
From: Lowell Gilbert <lowell@world.std.com>
Date: 09 Mar 2001 09:22:31 -0500
In-Reply-To: jason@jason-n3xt.org's message of "8 Mar 2001 07:07:51 +0100"
Message-ID: <44hf13xbrs.fsf@lowellg.ne.mediaone.net>
Lines: 24
X-Mailer: Gnus v5.7/Emacs 20.7
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

jason@jason-n3xt.org (Jason Halbert) writes:

> I noticed in the daily run report (I'm assuming that's generated by a
> cron job) it lists login failures.  Is there a way to modify it so
> that it reports all logins, successful and failed; and perhaps even
> ftp logins as well?

The proper setting for syslog's auth facility should do this.  See the
manual for syslog.conf(5).

The daily run report is generated by periodic(8), which is indeed
invoked by cron.

> And a security question...
> I have noticed since I started running apache and a IRC server and
> somewhat a shell provider that I am getting more and more people
> trying to login via telnet and trying random crap to login.  Is this
> normal?  That may seem a stupid question, but I'm wondering about this
> from POV of anyone really being able to get in.

Yes, it's normal; the more people who know you have a server machine
on the Internet, the more people will poke at it.  Not all of them are
badly intentioned, although some are.  Make sure your defenses are up.
Start with http://www.freebsd.org/security/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message