Date: Tue, 21 Sep 1999 11:50:19 -0700 From: Joe Bo <ibjoe@home.com> To: freebsd-questions@freebsd.org Subject: is this an attack? Message-ID: <2.2.32.19990921185019.0141abb8@netmail.home.com>
next in thread | raw e-mail | index | archive | help
Hi. I'm running FreeBSD v3.2. I have rc.firewall set
for "open" and in inetd.conf everything is commented out
except ftp, telnet, shell, login, comsat and ntalk. I
installed the tcpwrappers port but never configured it.
So I guess it isn't doing anything.
I'm still kind of new
at this. Today I found this stuff in my
/var/log/messages file. Can anyone tell me what this
means? Is this an attack of some kind?
Should I take some kind of action to protect my machine?
Or am I being paranoid? Thanks for any insights!
Joe
from /var/log/messages ("url" was an actual url,
and I formatted for < 80 char)...
ftpd[16623]: ANONYMOUS FTP LOGIN REFUSED FROM url
sendmail[16624]: NOQUEUE: SYSERR: putoutmsg ([url]):
error on output channel sending "550 guest... User unknown": Broken pipe
sendmail[16625]: NOQUEUE: SYSERR: putoutmsg ([url]):
error on output channel sending "550 decode... User unknown": Broken pipe
sendmail[16626]: NOQUEUE: SYSERR: putoutmsg ([url]):
error on output channel sending "550 bbs... User unknown": Broken pipe
sendmail[16627]: NOQUEUE: SYSERR: putoutmsg ([url]):
error on output channel sending "550 lp... User unknown": Broken pipe
sendmail[16628]: NOQUEUE: SYSERR: putoutmsg ([url]):
error on output channel sending "550 uudecode... User unknown": Broken pipe
sendmail[16622]: NOQUEUE: "wiz" command from [url] (url)
sendmail[16622]: NOQUEUE: SYSERR: putoutmsg ([url]):
error on output channel sending "500 Command unrecognized: "wiz"": Broken pipe
sendmail[16622]: NOQUEUE: "debug" command from [url] (url)
sendmail[16622]: NOQUEUE: SYSERR: putoutmsg ([url]):
error on output channel sending "500 Command unrecognized: "debug"": Broken pipe
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2.2.32.19990921185019.0141abb8>