From owner-freebsd-questions@FreeBSD.ORG Fri Mar 31 03:48:43 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ADE4F16A420 for ; Fri, 31 Mar 2006 03:48:43 +0000 (UTC) (envelope-from hoyimtang@yahoo.com) Received: from web35812.mail.mud.yahoo.com (web35812.mail.mud.yahoo.com [66.163.179.181]) by mx1.FreeBSD.org (Postfix) with SMTP id D902743D58 for ; Fri, 31 Mar 2006 03:48:41 +0000 (GMT) (envelope-from hoyimtang@yahoo.com) Received: (qmail 1389 invoked by uid 60001); 31 Mar 2006 03:48:41 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=y3qczpj8YGFs4iNN7NODTImtkXihWSFyCzDaKryvEUy4Kq7v9z5mu4QxRBv02kuz4uLS3h4W7qh1qXMZbpIKXrXF8A99tGiPdLZF+1f65Eyahwga3AC2aIKQf4xtD8QYGceRsYMDnvgNXUsQKtlEdSOnMHJSU45jGqLpZZB1JVE= ; Message-ID: <20060331034841.1387.qmail@web35812.mail.mud.yahoo.com> Received: from [210.6.198.232] by web35812.mail.mud.yahoo.com via HTTP; Thu, 30 Mar 2006 19:48:41 PST Date: Thu, 30 Mar 2006 19:48:41 -0800 (PST) From: Tang Ho Yim To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: sshd BREAKIN ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Mar 2006 03:48:43 -0000 I got a error messages from /var/log/auth.log which is about sshd...... .....sshd : reverse mapping checking getaddrinfo for core-01.148.rdcw.com failed - POSSIBLE BREAKIN ATTEMPT ! all my sshd_config is default setting except I have change to "PasswordAuthentication NO , PermitEmptyPasswords NO , and ChallengeResponseAuthentication NO" Is that I am being hack ? last command show who is login before but it seem ok.... What should I do ? Thanks ! --------------------------------- Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.