From owner-freebsd-questions@FreeBSD.ORG Mon Nov 24 13:23:49 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 65C4C16A4CE for ; Mon, 24 Nov 2003 13:23:49 -0800 (PST) Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1BF4843FA3 for ; Mon, 24 Nov 2003 13:23:48 -0800 (PST) (envelope-from mtech@buffnet.net) Received: from mohsin (mohsin.buffnet.net [205.246.19.98]) by buffnet4.buffnet.net (8.12.8/8.8.7) with SMTP id hAOLNsDJ042863; Mon, 24 Nov 2003 16:23:55 -0500 (EST) (envelope-from mtech@buffnet.net) Message-ID: <005d01c3b2d1$2cd8caa0$6213f6cd@mohsin> From: "Mohsin Rahman" To: "Kent Stewart" , "Spades" , References: <20031124085442.9FCA36B5F7@jareth.dreamhost.com><001001c3b2be$cae743b0$fa10fea9@bryanuptrvb0jc> <200311241128.56354.kstewart@owt.com> Date: Mon, 24 Nov 2003 16:23:16 -0500 Organization: BuffNET X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Subject: Re: Connection attempt to TCP messages in /var/log/messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Mohsin Rahman List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Nov 2003 21:23:49 -0000 sysctl -w net.inet.tcp.log_in_vain=1 sysctl -w net.inet.udp.log_in_vain=1 turns em on and sysctl -w net.inet.tcp.log_in_vain=0 sysctl -w net.inet.udp.log_in_vain=0 turns them off. Hope this helps. Anyone know how to add a time/date to this log entry and which file to modify? -- Mohsin Rahman mtech@buffnet.net ----- Original Message ----- From: "Kent Stewart" To: "Spades" ; Sent: Monday, November 24, 2003 2:28 PM Subject: Re: Connection attempt to TCP messages in /var/log/messages > On Monday 24 November 2003 11:11 am, Spades wrote: > > I did a tail -f /var/log/messages and got all these.. > > > > previously before my cvs and recompile kernel to 4.9 stable > > it didn't have below.. now it does.. > > > > Nov 25 03:09:56 asia /kernel: Connection attempt to TCP 202.79.180.131:80 > > from 65.217.41.66:1681 > > Nov 25 03:09:58 asia /kernel: Connection attempt to TCP 202.79.180.130:80 > > from 24.136.234.77:4059 > > > > question.. how to stop seeing them in /var/log/messages? > > > > Buy a hardware firewall that you place in front of your computer. You probably > have a log option in your firewall and someone is trying to connect to your > web server. You could turn off logging but I like to know who is trying to > connect to my systems. This is especially true when I am not running a > service and they are probing to find out if I am. > > Kent > > -- > Kent Stewart > Richland, WA > > http://users.owt.com/kstewart/index.html > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >