From owner-freebsd-questions Tue Sep 21 11:50:29 1999 Delivered-To: freebsd-questions@freebsd.org Received: from diablo.peritek.com (diablo.peritek.com [198.151.249.9]) by hub.freebsd.org (Postfix) with ESMTP id F227B15A18 for ; Tue, 21 Sep 1999 11:50:21 -0700 (PDT) (envelope-from ibjoe@home.com) Received: from neptune (neptune [198.151.249.84]) by diablo.peritek.com (8.8.7/8.8.7) with SMTP id LAA26404 sender ibjoe@home.com for ; Tue, 21 Sep 1999 11:50:20 -0700 (PDT) X-Envelope-From: ibjoe@home.com X-Envelope-To: Message-Id: <2.2.32.19990921185019.0141abb8@netmail.home.com> X-Sender: ibjoe@netmail.home.com X-Mailer: Windows Eudora Pro Version 2.2 (32) Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Tue, 21 Sep 1999 11:50:19 -0700 To: freebsd-questions@freebsd.org From: Joe Bo Subject: is this an attack? Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi. I'm running FreeBSD v3.2. I have rc.firewall set for "open" and in inetd.conf everything is commented out except ftp, telnet, shell, login, comsat and ntalk. I installed the tcpwrappers port but never configured it. So I guess it isn't doing anything. I'm still kind of new at this. Today I found this stuff in my /var/log/messages file. Can anyone tell me what this means? Is this an attack of some kind? Should I take some kind of action to protect my machine? Or am I being paranoid? Thanks for any insights! Joe from /var/log/messages ("url" was an actual url, and I formatted for < 80 char)... ftpd[16623]: ANONYMOUS FTP LOGIN REFUSED FROM url sendmail[16624]: NOQUEUE: SYSERR: putoutmsg ([url]): error on output channel sending "550 guest... User unknown": Broken pipe sendmail[16625]: NOQUEUE: SYSERR: putoutmsg ([url]): error on output channel sending "550 decode... User unknown": Broken pipe sendmail[16626]: NOQUEUE: SYSERR: putoutmsg ([url]): error on output channel sending "550 bbs... User unknown": Broken pipe sendmail[16627]: NOQUEUE: SYSERR: putoutmsg ([url]): error on output channel sending "550 lp... User unknown": Broken pipe sendmail[16628]: NOQUEUE: SYSERR: putoutmsg ([url]): error on output channel sending "550 uudecode... User unknown": Broken pipe sendmail[16622]: NOQUEUE: "wiz" command from [url] (url) sendmail[16622]: NOQUEUE: SYSERR: putoutmsg ([url]): error on output channel sending "500 Command unrecognized: "wiz"": Broken pipe sendmail[16622]: NOQUEUE: "debug" command from [url] (url) sendmail[16622]: NOQUEUE: SYSERR: putoutmsg ([url]): error on output channel sending "500 Command unrecognized: "debug"": Broken pipe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message