From owner-freebsd-security Fri Aug 24 6: 1:41 2001 Delivered-To: freebsd-security@freebsd.org Received: from titan.parkline.ru (titan.parkline.ru [195.209.63.162]) by hub.freebsd.org (Postfix) with ESMTP id 703A737B406 for ; Fri, 24 Aug 2001 06:01:36 -0700 (PDT) (envelope-from aronov@parkline.ru) Received: from ami.gpt.ru (ami.gpt.ru [195.209.50.5]) by titan.parkline.ru (8.9.2/8.9.2) with ESMTP id RAA09295; Fri, 24 Aug 2001 17:01:24 +0400 (MSD) (envelope-from aronov@parkline.ru) Date: Fri, 24 Aug 2001 17:00:21 +0400 (MSD) From: Mikhail Aronov X-X-Sender: To: Martin Chandler Cc: Subject: Re: strange log messages In-Reply-To: <4.3.2-J.20010824165539.02ce6720@mail.tvt.ne.jp> Message-ID: <20010824165718.R578-100000@ami.gpt.ru> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Aug 24, 2001, Martin Chandler wrote: >hello, > >This may be the wrong list to post to, but please forgive me. > >I have recently been seeing this in my log files, seeming to occur roughly >every half hour for periods of time. > >Aug 24 16:29:09 tvtsv2 inetd[59868]: warning: /etc/hosts.allow, line 29: >can't verify hostname: gethostbyname(tm1665-4.oninet.ne.jp) failed > >line 29 of /etc/hosts.allow is: > >ALL : localhost localhost.tvt.ne.jp : allow > >The system is, unfortunately, Freebsd 3.3-RELEASE, but with relevant >security patches applied (hopefully!). >Would anyone be able to clue me in as to what might be going on? >Thanks, >MRC tcpd applies /etc/hosts.allow rules only if direct and reverse DNS get success. Here we can see - #host tm1665-4.oninet.ne.jp Host not found. So - can't verify hostname: gethostbyname(tm1665-4.oninet.ne.jp) failed Yours, Mikhail Aronov aronov@parkline.ru Garant-Park-Telecom, System administrator To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message