Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Feb 2003 11:38:24 -0500
From:      Bill Moran <wmoran@potentialtech.com>
To:        "P.U.Kruppa" <root@pukruppa.de>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Security Problem (?): strange logs
Message-ID:  <3E565600.8050207@potentialtech.com>
References:  <20030221171200.N254@small.pukruppa.de>

next in thread | previous in thread | raw e-mail | index | archive | help
P. U. Kruppa wrote:
> Hi,
> 
> browsing my /var/log directory I found many files like these
> 
>               -----------------------------
> (...)
> log.?__???3

<snip>

> log.ibm all in one >
> 		----------------------------------
> 
> Most of them are empty, some of them contain messages like this
> 
> 		---------------------------------
> 
> (...)
> [2003/02/21 17:14:30, 0] smbd/service.c:make_connection(252)
>   gustavo (80.100.23.30) couldn't find service c
> 
>                ---------------------------------
> 
> Do I have any serious security problem, or are these some
> script kiddies ?

I would consider it a security problem if you don't know who those
Windows machines belong to.
Make sure SMB is firewalled off from the Internet, it will reduce
the risk considerably.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E565600.8050207>