From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ish Rattan To: <9fans@cse.psu.edu> Subject: Re: [9fans] A small question.. In-Reply-To: <20011017190652.7034A19A26@mail.cse.psu.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Date: Wed, 17 Oct 2001 15:45:50 -0400 Topicbox-Message-UUID: 0a47d164-eaca-11e9-9e20-41e7f4b1d025 On Wed, 17 Oct 2001 forsyth@caldo.demon.co.uk wrote: > >>Also, in file: /sys/log/ftp > >>193.252.168.243.1811 user anonymous 193.252.168.243 > > >>what could it be? > > >>Is it that the machine is visible on internet so attempts are being made > >>to get into it?? > > yes. do a reverse lookup on that address. some addresses can be resolved in reverse lookup but some do not exist! I have not set up anonymous ftp etc., so, next question is how do I know that these attempts have succeded or failed? I also similar entries in file: /sys/log/ssh and /sys/log/auth > be sure you've got anonymous ftp set up sensibly if you enable it at all. How do I that? I have not touched the defaults except the e-mail setup. -ishwar