Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Aug 2001 17:00:21 +0400 (MSD)
From:      Mikhail Aronov <aronov@parkline.ru>
To:        Martin Chandler <chand@tvt.ne.jp>
Cc:        <freebsd-security@FreeBSD.ORG>
Subject:   Re: strange log messages
Message-ID:  <20010824165718.R578-100000@ami.gpt.ru>
In-Reply-To: <4.3.2-J.20010824165539.02ce6720@mail.tvt.ne.jp>

next in thread | previous in thread | raw e-mail | index | archive | help
On Aug 24, 2001, Martin Chandler wrote:

>hello,
>
>This may be the wrong list to post to, but please forgive me.
>
>I have recently been seeing this in my log files, seeming to occur roughly
>every half hour for periods of time.
>
>Aug 24 16:29:09 tvtsv2 inetd[59868]: warning: /etc/hosts.allow, line 29:
>can't verify hostname: gethostbyname(tm1665-4.oninet.ne.jp) failed
>
>line 29 of /etc/hosts.allow is:
>
>ALL : localhost localhost.tvt.ne.jp : allow
>
>The system is, unfortunately, Freebsd 3.3-RELEASE, but with relevant
>security patches applied (hopefully!).
>Would anyone be able to clue me in as to what might be going on?
>Thanks,
>MRC

tcpd applies /etc/hosts.allow rules only if direct and reverse DNS get
success. Here we can see -

#host tm1665-4.oninet.ne.jp
Host not found.

So - can't verify hostname: gethostbyname(tm1665-4.oninet.ne.jp) failed

Yours,
              Mikhail Aronov
             aronov@parkline.ru
  Garant-Park-Telecom, System administrator


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010824165718.R578-100000>