From owner-freebsd-questions@FreeBSD.ORG Fri Dec 11 11:39:53 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 821EA1065676 for ; Fri, 11 Dec 2009 11:39:53 +0000 (UTC) (envelope-from nb@ravenbrook.com) Received: from raven.ravenbrook.com (raven.ravenbrook.com [193.164.110.8]) by mx1.freebsd.org (Postfix) with ESMTP id 130528FC18 for ; Fri, 11 Dec 2009 11:39:52 +0000 (UTC) Received: from thrush.ravenbrook.com (thrush.ravenbrook.com [193.164.110.145]) by raven.ravenbrook.com (8.14.3/8.14.2) with ESMTP id nBBBdooE085445 for ; Fri, 11 Dec 2009 11:39:50 GMT (envelope-from nb@ravenbrook.com) Received: from thrush.ravenbrook.com (localhost [127.0.0.1]) by thrush.ravenbrook.com (8.13.4/8.13.4) with ESMTP id nBBBdo1m095066 for ; Fri, 11 Dec 2009 11:39:50 GMT (envelope-from nb@thrush.ravenbrook.com) From: Nick Barnes To: freebsd-questions@freebsd.org In-Reply-To: from $witch of "Fri, 11 Dec 2009 12:29:44 +0100" Date: Fri, 11 Dec 2009 11:39:50 +0000 Message-ID: <95065.1260531590@thrush.ravenbrook.com> Sender: nb@ravenbrook.com X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.3 (raven.ravenbrook.com [193.164.110.8]); Fri, 11 Dec 2009 11:39:50 +0000 (GMT) X-Virus-Scanned: ClamAV 0.94.1/10149/Thu Dec 10 22:26:20 2009 on raven.ravenbrook.com X-Virus-Status: Clean X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on raven.ravenbrook.com X-Spam-Level: X-Spam-Status: No, score=-4.0 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham version=3.2.5 Subject: Re: Root exploit for FreeBSD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Dec 2009 11:39:53 -0000 At 2009-12-11 11:29:44+0000, $witch writes: > but i look in syslogs of some FreeBSD internet server and there is a great > evidence that some "botnets" are (again) tryng simple combination of > uid/pwd. # always, everywhere: PasswordAuthentication No Nick B