From owner-freebsd-questions  Sat Sep 16 12: 6:17 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from guru.mired.org (zoom2-030.telepath.com [216.14.2.30])
	by hub.freebsd.org (Postfix) with SMTP id 523DB37B423
	for <questions@freebsd.org>; Sat, 16 Sep 2000 12:06:08 -0700 (PDT)
Received: (qmail 12426 invoked by uid 100); 16 Sep 2000 19:05:31 -0000
From: Mike Meyer <mwm@mired.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <14787.50299.831968.420041@guru.mired.org>
Date: Sat, 16 Sep 2000 14:05:31 -0500 (CDT)
To: a11 <a11@pclv.com>
Cc: questions@freebsd.org
Subject: Re: Someone into my system?
In-Reply-To: <83566014@toto.iv>
X-Mailer: VM 6.72 under 21.1 (patch 10) "Capitol Reef" XEmacs Lucid
X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`;h9L,Yg`+vb1>RG%
 *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

a11 writes:
> [...] Wed evening. I was informed that there had been a power outage and that
> "may" have caused it.

Unless you have a UPS of some sort, the power outage will have caused
your system to reboot. The last part of a reboot has messages that
look like this:

> aliasing to <our IP number> mtu 1500 bytes
> add net default: gateway <our gateway address appears here>
> additional routing options: tcp extensions=NO IP gateway=YES TCP
> keepalive=YES
> routing daemons: .
> Mounting NFS file systems.
> additional daeman: syslogdde0: DAD complete for
> fe80:0001::0240:05ff:fea1:8f42 - no duplicates found.
> dc0: DAD complete for fe80:0002::)2a):ccff:fe40:cdb6 - no duplicates
> found.
> 
> Doing additional network setup: named portmap
> Starting final network daemons:.
> setting ELF ldconfig path:/usr/liv /usr/lib/compat /usr/local/lib
> setting a.out ldconfig path: /usr/lib/aout /usr/lib/compat/aout
> starting standard daemons: inetd cron sendmail.
> Initial rc.i386 initialization: .
> rc.i386 configuring syscons: blank_time
> starting local daemons: [Wed Sep 13 18:27:34 2000] [warn]
> NameVirtualHost <our secondary IP number> has no VirtualHosts
> Apache/1.3.2 mod_ssl/2.62(PassPhraseDialog) Some of your private key
> files are encrypted for security reasons. In order to read them you have
> 
> to provide us with the pass phrases.
> Enter pass phrase:
> 
> Thurs, a new line showed up at the bottom:
> Apache mod_ssl: Error: Pass phrase incorrect. (5 more retries permitted)
> 
> Enter pass phrase:

This is from Apache, and was dealt with by Mr. Wells.

If you want to watch a reboot to see if it's different, log into the
console as root and issue the command "shutdown -r now". Yes, this
will take the system out of commision for a bit. But you should be
able to verify that the above messages are the from the last bit of
the boot process.

	<mike



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message