Clifford~ Thanks for the reply. rpm-qa|grep logwatch reveals: logwatch-5.1.3 I haven't started looking at the 'root' mail yet, since I haven't figured a way to get the email client to read the root from the local system. I did find the man page on logwatch and am reading up on it. Thanks for the tip! John Dangler GenoFit 800-505-4078 (Corporate) 386-767-3730 (Direct) www.genofit.com jdangler@xxxxxxxxxxx -----Original Message----- From: fedora-list-bounces@xxxxxxxxxx [mailto:fedora-list-bounces@xxxxxxxxxx] On Behalf Of Clifford Snow Sent: Saturday, July 17, 2004 8:34 PM To: 'For users of Fedora Core releases' Subject: RE: hack attempt on my server...What do you do about this? On Sat, 2004-07-17 at 12:53, John Dangler wrote: > As a newbie to this myself, I'm curious to know where you found that > information (what logs). > Thanks for the information. Check to see if you have LogWatch (rpm -qa|grep logwatch) installed. By default LogWatch sends messages to root everyday. Its easy to review your logs every day by just reading an email. If you don't have logwatch installed, it is available via yum. The alternative is to look in /var/log - numerous log files are fond there. However, some can be so large that its easy to miss an import message. -- Clifford Snow