Web Hosting Forum | Lunarpages
News: April 3, 2008 - New Contest! - Win 5 Years of Hosting and $1,000!
June 30, 2008 - Submit Your Site for the July 08 Site of the Month Award!
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
July 05, 2008, 06:50:47 PM


Login with username, password and session length


Pages: [1]   Go Down
  Print  
Author Topic: Portsentry logs, what's what?  (Read 853 times)
dtportnoy69
Space Explorer
***
Offline Offline

Posts: 7


« on: April 23, 2008, 07:07:22 AM »

Hi,

I'm wondering if anyone knows what's normal on the portsentry logs. I secured the server enough to slim the logs down, but there's 2 log entry types that are really fillng my logs. Here they are:

1) Apr 22 04:19:02 vps named[30559]: lame server resolving '63.167.133.166.in-addr.arpa' (in '167.133.166.in-addr.arpa'?): 209.183.48.20#53 I get ALOT OF THESE
and alot of the following:
2) Apr 23 01:28:41 vps xinetd[30599]: START: smtp pid=16137 from=117.22.56.122

No clue what any of them are. And i'm not sure what xinetd is or why smtp pid would be called. I don't use any mailing in my scripts, the only mail I have setup are a few addresses that directly forward to an external address.

Anyone know about these entries?
Thanks in advance!
Logged
perestrelka
Administrator
Jedi
*****
Offline Offline

Posts: 948



« Reply #1 on: April 24, 2008, 02:49:46 AM »

Hello,

I'll try to address your concerns.

Quote
1) Apr 22 04:19:02 vps named[30559]: lame server resolving '63.167.133.166.in-addr.arpa' (in '167.133.166.in-addr.arpa'?): 209.183.48.20#53 I get ALOT OF THESE

Nameserver (named) configured on your server is reporting about badly configured nameservers in messages like this. You can simply ignore them or add the following line into the options section of named.conf to stop logging for them:

logging { category lame-servers { null; };};

Don't forget to restart named after editing the configuration to apply the changes.

Quote
Apr 23 01:28:41 vps xinetd[30599]: START: smtp pid=16137 from=117.22.56.122

This message is from xinetd superserver starting smtp server for incoming SMTP connections. It is normal for server running mail services and accepting incoming emails (even just for forwarding them later).

I hope this helps.
Logged

Kind Regards,
Vlad Artamonov
dtportnoy69
Space Explorer
***
Offline Offline

Posts: 7


« Reply #2 on: April 25, 2008, 12:08:30 PM »

Perfect that seemed to have worked.
Thanks for the info!
Logged
perestrelka
Administrator
Jedi
*****
Offline Offline

Posts: 948



« Reply #3 on: April 25, 2008, 11:48:27 PM »


Not a problem!
Logged

Kind Regards,
Vlad Artamonov
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.3 | SMF © 2006-2007, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks


Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM