[100729] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: log entry question

daemon@ATHENA.MIT.EDU (Ramon Gandia)
Mon Nov 23 04:49:43 1998

Date: Mon, 23 Nov 1998 00:45:45 -0900
From: Ramon Gandia <rfg@nook.net>
To: redhat-list@redhat.com
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

"Thomas Ribbrock (Design/DEG)" wrote:
> 
> Hi out there,
> 
> I'm wondering if somebody out there could tell me what this entry in
> /var/log/messages means:
> 
> Nov 22 23:54:40 angua identd[810]: Connection from sprintrpg.com
> Nov 22 23:54:40 angua identd[810]: Successful lookup: 2211 , 25 : root
> 
> I found that entry about two hours later. I was logged in to my ISP via PPP
> at the time this entry occurred. My machine is running a RHL 4.2 system with
> all relevant updates applied (excl. the latest X update) and I do have a
> ALL:ALL in my /etc/hosts.deny. Do I need to be worried about that log entry?

This is from E-mail.  Basically its a machine (sprintrpg.com)
accessing your computer to send or receive email via SMTP.  I
do believe that most MTA, like Sendmail, will verify the IP
address of the requestor to make sure its legitimate.  You will
then see the above log entry.  I get thousands a day.... in 
/var/log/daemon not in /var/log/messages.

-- 
Ramon Gandia ==== Sysadmin ==== Nook Net ==== http://www.nook.net
285 West First Avenue                                rfg@nook.net
P.O. Box 970                                    tel. 907-443-7575
Nome, Alaska 99762-0970 ======================= fax. 907-443-2487


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
		http://www.redhat.com http://archive.redhat.com
         To unsubscribe: mail redhat-list-request@redhat.com with 
                       "unsubscribe" as the Subject.


home help back first fref pref prev next nref lref last post