Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: calisun on July 29, 2006, 12:42:44 PM

Title: Was I hacked?
Post by: calisun on July 29, 2006, 12:42:44 PM

While going through my message logs I have found an entry that I don't really understand. Was I hacked or not?

Jul 24 21:02:30 smeserver dhclient: DHCPREQUEST on eth1 to 255.255.255.255 port 67
Jul 24 21:02:30 smeserver dhclient: DHCPACK from 73.111.152.1
Jul 24 21:02:30 smeserver rc.e-smith: Starting ippp:  succeeded

Title: Was I hacked?
Post by: ldkeen on July 30, 2006, 08:09:27 AM

Well, I might be wrong but it looks to me like you have a dynamic IP address with your ISP and your sme server requested a new lease via eth1. In any case you really shouldn't be asking security related questions on public forums - send your requests to securityATcontribs.org.
Lloyd

Title: Was I hacked?
Post by: edtest on July 31, 2006, 01:19:54 PM

That's not a hack, it's a DHCP ACK - an address was offered by the DHCP server and acknowledged by your server.

Title: Was I hacked?
Post by: calisun on August 02, 2006, 06:59:04 PM

yes, I have dynamic IP, but the IP address shown is not the IP address of my server.

Title: Was I hacked?
Post by: CharlieBrady on August 02, 2006, 08:44:11 PM

Quote from: "calisun"

yes, I have dynamic IP, but the IP address shown is not the IP address of my server.

No, it's the IP address of the DHCP server at your ISP. That's what "from" means.