On Mon, 2008-03-31 at 05:56 +0800, Fennix wrote: > On Mon, Mar 31, 2008 at 5:55 AM, Fennix <cn.stefan@xxxxxxxxx> wrote: > [root@bogon log]# cat /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=localhost.localdomain > [root@bogon log]# > > > On Mon, Mar 31, 2008 at 5:50 AM, Craig White > <craigwhite@xxxxxxxxxxx> wrote: > On Mon, 2008-03-31 at 05:44 +0800, Fennix wrote: > > I noticed today in my terminal window I now have a > host name of > > "bogon". I had never set a hostname for my Fedora8 > home system. I > > can see from my logwatch and cron system mails that > the delivery to > > this host name started March 25th but none of my > mails shows anything > > that seems relevant to what has set this hostname. > Oddly on the 26th > > the system mails were addresses again to > localhost.localdomain but > > again reverted on the 27th to being addresses to > bogon. I have > > checked the man pages on the hostname command to > locate where the name > > is defined. Have checked the > > files /etc/host, /etc/hosts.conf, /etc/hostname > (does not > > exist), /etc/nsswitch.conf, ... but this name does > not show in any of > > the files I have looked at so far. Any ideas where > to look further? > > I am now wondering whether my system has been > compromised somehow... > > Googleing the word bogon shows me the meaning of of > bogon which does > > not seem helpful in this case. > > > > Checking /var/log/messages-20080330 shows the use of > this hostname > > with a reboot I had done on the 24th. Still cannot > see where or how > > this was set. > ---- > what is output of? > > cat /etc/sysconfig/network > > Craig > > Ooops.... > > > [root@bogon log]# cat /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=localhost.localdomain ---- sounds as if the name is attached to either: - NetworkManager and since I don't use it, I don't know where it might store supplemental settings... - the configuration of the device itself - in some script that sets the name somewhere. is this system using DHCP to get its ip address? if so, what is ouput of... /etc/dhclient-eth0.conf I think that if the hostname is 'reset', it should be reflected in syslog... what is output of... grep Host /var/log/messages Might it be set in /etc/rc.d/rc.local? tail /etc/rc.d/rc.local # should look very much like this and anything # additional might be a script that sets it #!/bin/sh # # This script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. touch /var/lock/subsys/local Craig