[100970] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: log entry question

daemon@ATHENA.MIT.EDU (Azfar Kazmi)
Tue Nov 24 00:03:32 1998

Date: Tue, 24 Nov 1998 09:15:44 +0500
To: redhat-list@redhat.com
From: Azfar Kazmi <oup1@cyber.net.pk>
Cc: Ramon Gandia <rfg@nook.net>
In-Reply-To: <36592EC9.3B444130@nook.net>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

I have such entries in my /var/log/messages but for port 80 and host
hiyapal.bbc.com. I am running a http server [Apache 1.3.1] just to serve
internal users - not to the world. How can I disallow all outside users to
get into my machine on port 80?

I have specified host-only allow in hosts.allow and hosts.deny:

#hosts.allow
ALL: LOCAL

#hosts.deny
ALL: ALL
ALL: .bbc.com
ALL: 198.175.187.10

But I believe that these files have nothing to do with port 80, do they?

--
Azfar

At 12:45 AM 11/23/98 -0900, you wrote:
>"Thomas Ribbrock (Design/DEG)" wrote:
>> 
>> Hi out there,
>> 
>> I'm wondering if somebody out there could tell me what this entry in
>> /var/log/messages means:
>> 
>> Nov 22 23:54:40 angua identd[810]: Connection from sprintrpg.com
>> Nov 22 23:54:40 angua identd[810]: Successful lookup: 2211 , 25 : root
>> 
>> I found that entry about two hours later. I was logged in to my ISP via PPP
>> at the time this entry occurred. My machine is running a RHL 4.2 system
with
>> all relevant updates applied (excl. the latest X update) and I do have a
>> ALL:ALL in my /etc/hosts.deny. Do I need to be worried about that log
entry?
>
>This is from E-mail.  Basically its a machine (sprintrpg.com)
>accessing your computer to send or receive email via SMTP.  I
>do believe that most MTA, like Sendmail, will verify the IP
>address of the requestor to make sure its legitimate.  You will
>then see the above log entry.  I get thousands a day.... in 
>/var/log/daemon not in /var/log/messages.


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
		http://www.redhat.com http://archive.redhat.com
         To unsubscribe: mail redhat-list-request@redhat.com with 
                       "unsubscribe" as the Subject.


home help back first fref pref prev next nref lref last post