Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Mar 2006 20:14:39 -0800 (PST)
From:      Tang Ho Yim <hoyimtang@yahoo.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: sshd BREAKIN ?
Message-ID:  <20060331041439.48253.qmail@web35804.mail.mud.yahoo.com>
In-Reply-To: <442CA8E4.2060403@bom.gov.au>

next in thread | previous in thread | raw e-mail | index | archive | help
core-01.148.rdcw.com is not my machine.......how come ?

Wee-Sern Soo <W.Soo@bom.gov.au> wrote:  Checked that your machine core-01.148.rdcw.com has a PTR record in DNS. 
It is used to determine name of machine from the IP address.

Regards,
Wee-Sern


Tang Ho Yim wrote the following on 31/03/2006 2:48 PM:
> I got a error messages from /var/log/auth.log which is about sshd......
> 
> .....sshd : reverse mapping checking getaddrinfo for core-01.148.rdcw.com failed - POSSIBLE BREAKIN ATTEMPT !
> 
> all my sshd_config is default setting except I have change to "PasswordAuthentication NO , PermitEmptyPasswords NO , and ChallengeResponseAuthentication NO"
> 
> Is that I am being hack ?
> last command show who is login before but it seem ok....
> What should I do ?
> 
> Thanks !
>
> 
> ---------------------------------
> Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>
>
>
> 
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


			
---------------------------------
Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060331041439.48253.qmail>