Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Aug 2011 11:01:21 -0400
From:      Mark Moellering <mark@msen.com>
To:        FreeBSD <freebsd-questions@freebsd.org>
Subject:   My server is under attack (I think)
Message-ID:  <4E4E7AC1.5000904@msen.com>

Next in thread | Raw E-Mail | Index | Archive | Help
I keep seeing a flood of messages when I run dmesg -a that look like this:

mail sshd[1831]: warning: /etc/hosts.allow, line 2: can't verify 
hostname: getaddrinfo(ip223.hichina.com, AF_INET) failed

Is there anything I should be doing to make sure the server isn't 
compromised?  It is a mail server running postfix / dovecot
I have pf set up and am also running a program called sshguard.
I am kind of at a loss.  It looks like I am under attack but I don't 
know what to do about it.  Any help is greatly appreciated

Thanks in advance

Mark Moellering
mark@msen.com



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?4E4E7AC1.5000904>