Ankush Grover wrote:
hey friends,
Here is my log file which is generated by Logwatch .
crond:
Unknown Entries:
session closed for user root: 313 Time(s)
session opened for user root by (uid=0): 313 Time(s)
Those arise from cron jobs being run. It's a normal occurrence, but I
can't attest that _all yours_ are legit. Peruse the cron logs to see the
specifics.
Relaying denied:
From unknown[211.48.102.152] to support@xxxxxxxxxxxxx : 1 Time(s)
From unknown[222.101.92.32] to smtphunter44@xxxxxxxx : 1 Time(s)
Someone is trying and failing to use your box to relay spam. It's
common, undesirable and I don't know any way to prevent it for your mail
servers. If the box doesn't need to receive email from the Internet,
prevent it. otherwise tolerate it.
I am little concerned with these 2 means are these the normal entries
or there is some problem.As it can be seen that cron daemon opened for
root 313 times isn't it too much.
Whether it's too much depends on what you have installed and configured.
--
Cheers
John
-- spambait
1aaaaaaa@xxxxxxxxxxxxxxxxxxxxxxx Z1aaaaaaa@xxxxxxxxxxxxxxxxxxxxxxx
Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/
