LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 12-16-2014, 03:45 PM   #1
grzeslaw
Member
 
Registered: Nov 2008
Posts: 111

Rep: Reputation: 24
Exclamation Tiger Auditing weird reports


Hi,

Every day since I've installed tiger, I get very weird information to my email:
Code:
# Checking listening processes
OLD: --WARN-- [lin003w] The process `pure-ftpd-mysql' is listening on socket 21 (TCP on $MY_SERVER_IP interface) is run by iswinoujscie.
OLD: --WARN-- [lin003w] The process `pure-ftpd-mysql' is listening on socket 40154 (TCP on $MY_SERVER_IP interface) is run by iswinoujscie.
OLD: --WARN-- [lin003w] The process `smtpd' is listening on socket 25 (TCP on $MY_SERVER_IP interface) is run by postfix.

# Checking listening processes
NEW: --WARN-- [lin003w] The process `/usr/sbin/amavi' is listening on socket 39010 (UDP on every interface) is run by amavis.
NEW: --WARN-- [lin003w] The process `pop3-login' is listening on socket 995 (TCP on $MY_SERVER_IP interface) is run by dovenull.
NEW: --WARN-- [lin003w] The process `smtpd' is listening on socket 25 (TCP on $MY_SERVER_IP interface) is run by postfix.

# Checking listening processes
NEW: --WARN-- [lin003w] The process `smtpd' is listening on socket 25 (TCP on $MY_SERVER_IP interface) is run by postfix.

# Checking listening processes
NEW: --WARN-- [lin003w] The process `imap-login' is listening on socket 993 (TCP on $MY_SERVER_IP interface) is run by dovenull.

Neither postfix, amavis, dovecot and pure-ftpd-mysql are not restarted.. Wondering what those messages means.. How to prevent sending this messages? And why they are send?
 
Old 12-16-2014, 05:36 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by grzeslaw View Post
Wondering what those messages means.. (..) And why they are send?
Check the explanation file for "lin003w" (or use "-E")?


Quote:
Originally Posted by grzeslaw View Post
How to prevent sending this messages?
Either an ignore file or this?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Tiger report gutter_glory Linux - Security 2 11-01-2012 04:41 PM
Tiger indicated a problem. Matzah123 Linux - Security 3 07-15-2012 04:30 AM
Tiger How-To buntuser2 Ubuntu 2 03-15-2011 05:27 PM
file(1) reports weird Linux version belhifet Linux - General 1 08-20-2007 11:49 AM
tiger report ? divukman Linux - Security 1 02-24-2006 04:23 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 02:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration