Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 300
  • Last Modified:

fedora

HELP!! - I'm not good at this - I have this entry in /var/spool/mail/root

users logging in through sshd:
   root:
      172.16.26.113 (itw-ws-0017.mydomain.com ) : 1 time
** unmatched entries **
warning /etc/hosts.allow line 14: missing ":" separator : 1 time (s)
address 172.16.26.113 maps to itw-ws-mydomain.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time (s)

how can i see if this is a real possible break in?  Also - is there a way to see who is logged in to 172.16.26.113 using the ip address?
0
JeffBeall
Asked:
JeffBeall
1 Solution
 
arnoldCommented:
hosts.allow has the format:
service:host or list of hosts.
The error seems to suggest that you have
entry entry2
versus
entry: entry2
0
 
JeffBeallAuthor Commented:
you were right! I freaked out over nothing.
0

Featured Post

The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now