Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 31 Mar 2006 14:58:28 +1100
From:      Wee-Sern Soo <W.Soo@bom.gov.au>
To:        Tang Ho Yim <hoyimtang@yahoo.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: sshd BREAKIN ?
Message-ID:  <442CA8E4.2060403@bom.gov.au>
In-Reply-To: <20060331034841.1387.qmail@web35812.mail.mud.yahoo.com>
References:  <20060331034841.1387.qmail@web35812.mail.mud.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help

Checked that your machine core-01.148.rdcw.com has a PTR record in DNS.  
It is used to determine name of machine from the IP address.

Regards,
Wee-Sern


Tang Ho Yim wrote the following on 31/03/2006 2:48 PM:
> I got a error messages from /var/log/auth.log which is about sshd......
>    
>   .....sshd : reverse mapping checking getaddrinfo for core-01.148.rdcw.com failed - POSSIBLE BREAKIN ATTEMPT !
>    
>   all my sshd_config is default setting except I have change to "PasswordAuthentication NO , PermitEmptyPasswords NO , and ChallengeResponseAuthentication NO"
>    
>   Is that I am being hack ?
>   last command show who is login before but it seem ok....
>   What should I do ?
>    
>   Thanks !
>
> 			
> ---------------------------------
> Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>
>
>
>   



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?442CA8E4.2060403>