LogWatch ftp question

		LinuxQuestions.org > Forums > Linux Forums > Linux - Security
LogWatch ftp question

Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Welcome to LinuxQuestions.org, a friendly and active Linux Community.

You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!

Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.

Are you new to LinuxQuestions.org? Visit the following links:
Site Howto | Site FAQ | Sitemap | Register Now

If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.

Having a problem logging in? Please visit this page to clear all LQ-related cookies.

Introduction to Linux - A Hands on Guide

This guide was created as an overview of the Linux Operating System, geared toward new users as an exploration tour and getting started guide, with exercises at the end of each chapter. For more advanced trainees it can be a desktop reference, and a collection of the base knowledge needed to proceed with system and network administration. This book contains many real life examples derived from the author's experience as a Linux system and network administrator, trainer and consultant. They hope these examples will help you to get a better understanding of the Linux system and that you feel encouraged to try out things on your own.

Click Here to receive this Complete Guide absolutely free.

Search this Thread

02-26-2002, 08:49 AM	#1
prozach Member Registered: Feb 2002 Distribution: Fedora RedHat Core 2 Posts: 58 Rep:	LogWatch ftp question In my Linux LogWatch file that get's emailed to me i am getting this log for ftpd: connection from cdm-208-135-252-brcs.cox-internet.com [208.180.135.252] Then that is it. Now that IP address I know is my friends and i see where it says he has logged in. Sometimes I see other ip addresses matched up with anonymous logins that were denied (I dont allow anonymous logins at my site). Other times i will see a line like that above without any matching row where someone tried to login or anything has been rejected or accepted. What causes that? Is there someone connecting but not attempting to login? Should i be worried? I have my machine behind a router with only the specific ports open that i have opened up. Thanks for your help!

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Logwatch & Postfix Question	msjenkins	Linux - General	0	11-27-2005 09:04 PM
Logwatch??	Palula	Linux - Newbie	2	08-02-2005 09:14 PM
*logwatch*	LinuxRam	Linux - General	1	08-25-2004 05:09 AM
logwatch	lildrummerboy	Linux - Newbie	1	07-29-2004 08:38 PM
Logwatch	miguel	Linux - General	0	11-08-2002 06:15 AM

All times are GMT -5. The time now is 08:56 PM.

Main Menu

(Con't)

My LQ

Write for LQ

LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.

Main Menu

Syndicate

Latest Threads

LQ News

Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions