Last night I left my machine online. In the morning I noticed this in the log.
Aug 5 04:55:19 gringo in.ftpd[3209]: warning: /etc/hosts.allow, line 5: missing ":" separator Aug 5 04:55:20 gringo in.ftpd[3209]: connect from 213.44.213.24 (213.44.213.24)
A friend replied with this. This is the one you have to worry about; the reverse name entry maps back to 213-44-213-24.rsv.club-internet.fr, so unless you've authorised some French users access to your system, someone's been having a look (and unless you have some firewalling in place, I'd be worrying about what they've accessed that _isn't_ logged, but that's just me). You'd best check to see if your variant of ftp daemon (I don't know SuSe) does any form of logging. "man ftpd" and work your way from there. Would anyone know who this is ? After all - I Iike French Wine, and supported them in the World Cup. We enjoyed the Tour de ! Can anyone suggest where to look for further info on my 7.1 Suse system ? Thanks
participants (1)
-
Brian Marr