On Fri, Jan 25, 2013 at 12:31:01AM +0700, Sthu Deus wrote: > Good time of the day. > > > Excuse me for off-topic. > > Could You please comment this auth. failure: > > localhost auth: pam_unix(dovecot:auth): authentication failure; > logname= uid=0 euid=0 tty=dovecot ruser=null rhost=91.201.64.249 > > ? > > As I understand this - one tried to login to dovecot - but dovecot was > closed by firewall from that IP, or it was tried from local side and > therefore I have a security issue inside of my system?
As far as I understand it, someone on 91.201.64.249 attempted to login. The message was logged on localhost, but the "rhost=..." bit tells you the other party (remote host).
signature.asc
Description: Digital signature
