I have been monitering my /var/log/message file and came across an entry that reads localhost portmap[9415]: connect from 63.237.56.1 to dump(): request from unauthorized host.
Does this mean that some one has gotten into my system?
No, it means that your tcp-wrapper rejected this connection attempt. The authorized hosts with the services they are allowed to connect to are listed in /etc/hosts.allow These kind of messages simply tell you who tried to connect to your box. I get approx. 1-5 of these kind of messages per day. So this is nothing to worry about. You should start worrying if you find entries of this kind repeated for many times with the same IP. Bye, Armin ------------------------------------------------------------------------ Armin Schöch at the office: Institut für Atmosphärenphysik Ziolkowskistr. 10 / 63 Schlossstraße 6 D-18059 Rostock D-18225 Kühlungsborn Tel. +49-(0)381-4005781 Tel. +49-(0)38293-68-102