Date: Fri, 21 Feb 2003 10:24:21 -0600 From: Dan Nelson <dnelson@allantgroup.com> To: "P.U.Kruppa" <root@pukruppa.de> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Security Problem (?): strange logs Message-ID: <20030221162421.GA92688@dan.emsphone.com> In-Reply-To: <20030221171200.N254@small.pukruppa.de> References: <20030221171200.N254@small.pukruppa.de>
next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Feb 21), P. U. Kruppa said: > browsing my /var/log directory I found many files like these > > ----------------------------- > (...) > log.─__ε┼═3 > log._τ___─ > log.a0035934 > log.aditi > log.alevrius_ > log.alevrius_.old > log.amanda > > Do I have any serious security problem, or are these some > script kiddies ? You porbably have a line line this in your smb.conf: log file = /var/log/log.%m which means that anyone connecting to your machine from a Windows machine through Network Neighborhood, even just browsing (i.e. not accessing any shares), gets a logfile created with the machinename as part of the name. -- Dan Nelson dnelson@allantgroup.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030221162421.GA92688>