From owner-freebsd-questions@FreeBSD.ORG Fri Mar 31 03:58:31 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 32DCD16A400 for ; Fri, 31 Mar 2006 03:58:31 +0000 (UTC) (envelope-from W.Soo@bom.gov.au) Received: from comms1.bom.gov.au (comms1.bom.gov.au [134.178.6.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 30B2643D49 for ; Fri, 31 Mar 2006 03:58:29 +0000 (GMT) (envelope-from W.Soo@bom.gov.au) Received: from [134.178.220.67] (tas-di-win02.tas.BoM.GOV.AU [134.178.220.67]) by comms1.bom.gov.au (8.9.3 (PHNE_29774)/8.9.3) with ESMTP id DAA08521; Fri, 31 Mar 2006 03:58:24 GMT Message-ID: <442CA8E4.2060403@bom.gov.au> Date: Fri, 31 Mar 2006 14:58:28 +1100 From: Wee-Sern Soo Organization: Bureau of Meteorology User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: Tang Ho Yim References: <20060331034841.1387.qmail@web35812.mail.mud.yahoo.com> In-Reply-To: <20060331034841.1387.qmail@web35812.mail.mud.yahoo.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: sshd BREAKIN ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: W.Soo@bom.gov.au List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Mar 2006 03:58:31 -0000 Checked that your machine core-01.148.rdcw.com has a PTR record in DNS. It is used to determine name of machine from the IP address. Regards, Wee-Sern Tang Ho Yim wrote the following on 31/03/2006 2:48 PM: > I got a error messages from /var/log/auth.log which is about sshd...... > > .....sshd : reverse mapping checking getaddrinfo for core-01.148.rdcw.com failed - POSSIBLE BREAKIN ATTEMPT ! > > all my sshd_config is default setting except I have change to "PasswordAuthentication NO , PermitEmptyPasswords NO , and ChallengeResponseAuthentication NO" > > Is that I am being hack ? > last command show who is login before but it seem ok.... > What should I do ? > > Thanks ! > > > --------------------------------- > Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > > > >