Koozali.org: home of the SME Server

Log Files

John

Log Files
« on: May 29, 2001, 09:50:56 PM »
I am just getting started on learning about log files. /var/log/security has a entry that has me concerned. it says something about AUTH and a strange IP address. Does AUTH mean that that IP has gained access? I ran a traceroute and the IP is somewhere in Russia!

Shaun R

Re: Log Files
« Reply #1 on: June 02, 2001, 07:22:26 PM »
did it say what port?

bet it was port 21
anonymous FTP which can be switched off from the web console Remote access option.