LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 12-27-2007, 10:57 AM   #1
Raakh
Member
 
Registered: May 2007
Posts: 128

Rep: Reputation: 15
WatchLog


I am receiving watchlog in my email from root@servername.com 3/4 times a day. the log shows somebody has entered into my dedicated server and logged with different usernames

I changed the ssh port and disabled root access through ssh by creating a wheel user. Now the watchlog shows authentication failed..... msg but still am receiving cron mails. cron mail problem I posted plz see at: http://www.linuxquestions.org/questi...me.com-609382/

what should I do?

thanks & best regards
 
Old 12-27-2007, 11:57 AM   #2
David1357
Senior Member
 
Registered: Aug 2007
Location: South Carolina, U.S.A.
Distribution: Ubuntu, Fedora Core, Red Hat, SUSE, Gentoo, DSL, coLinux, uClinux
Posts: 1,302
Blog Entries: 1

Rep: Reputation: 107Reputation: 107
Quote:
Originally Posted by Raakh View Post
...still am receiving cron mails.
Delete the cron job.

You can find the offending jobs in the cron files in "/etc".
 
Old 12-28-2007, 02:30 PM   #3
Raakh
Member
 
Registered: May 2007
Posts: 128

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by David1357 View Post
Delete the cron job.

You can find the offending jobs in the cron files in "/etc".
there are many folders and folders e.g. cron.d/cron.daily/cron.weekly/cron.monthly/

and files e.g.
cron.deny/crontab/

I even don't know what is cron? can you please guide me what to delete. My hosting hosting company recommended as follow:

You can log into the server and grab the daemon being used by doing rpm -qa | grep drweb. If your not using drweb as it requires a licence to use further and you currently have a demo licence, i suggest removing drweb by just removing the rpms. If you have any other problems, please open up another trouble ticket.
--------------------------------------------
[root@server ~]# rpm -qa | grep drweb
drweb-base-4.33-rh5_psa
drweb-qmail-4.33-rhel4.build80060613.20
drweb-daemon-4.33-rh5_psa
drweb-updater-4.33-rh3_psa
[root@server ~]#
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT -5. The time now is 12:10 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration