"njd 76" <[EMAIL PROTECTED]> wrote > I keep getting these every 15 minutes in my /var/log/messages. What does it > mean? Should i be worried here... > Sep 26 20:30:02 NAME proftpd[30964]: xxx.xxx.com > (localhost[xxx.xxx.xxx.xxx]) - FTP session opened. > > Sep 26 20:30:02 NAME proftpd[30964]: xxx.xxx.com > (localhost[xxx.xxx.xxx.xxx]) - FTP session closed. > > Sep 26 20:30:05 NAME telnetd[30969]: ttloop: read: Broken pipe > This type of a question belongs on the users list: To Subscribe or Unsubscribe, please go to: http://list.cobalt.com/mailman/listinfo/cobalt-users
The first two messages are from active monitor, it's checking to see if ftp is working. And you do not have to xxx localhost it's the same IP on all machines 127.0.0.1 The last one is from telnetd, and I hope this machine is not connected to the Internet. If it is then prepare to do a restore, it's probably been hacked! go to this url and get ssh installed and turn telnet OFF! http://pkg.nl.cobalt.com/ HTH Gerald _______________________________________________ cobalt-developers mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-developers
