IRC Logs

Network: freenode Channel: #gentoo

	Enter your search terms Submit search form
	Web www.irclog.org

[10:01]<yw>?
[10:02]<wyej>i just changed it to sudo grep ssh messages > ~/ssh.log
[10:02]<yw>no need to use cat.
[10:02]<yw>right :)
[10:02]<ggmryg>ix: the key is the ~/ actualy
[10:02]<vdg2jd>Vinatta: yes there r crazy ppl out there :) sadly i'm not one of them
[10:03]<wyej>i figured that i wouldnt have permissions to write to /var/log
[10:03]<wyej>so i changed it to ~/
[10:03]<wyej>Aug 3 23:52:39 alphak sshd[7877]: Invalid user test from 202.131.227.251
[10:04]<yw>endain: I didn't read him fully. But the key is still having rights to read /var/log/messages.
[10:04]<yw>AFAIK.
[10:04]<2ugmnz>hi there, server question if i may... http://tinyurl.com/jsu5b - anyone know how that display works?
[10:04]<yw>(yes, both)
[10:04]<wyej>this person tried, users "test, guest, admin, user", lol
[10:04]<lxjn>can someone give me the name of a file in the kernel source?
[10:04]<wyej>whoa, i got spammed real bad
[10:04]<2ugmnz>wizo: ip ban the person
[10:04]<2ugmnz>i get that every single day
[10:04]<sdp>wizo: I have 1247 lines of that for the last 5 days.
[10:05]<2ugmnz>wizo: either turn off ssh or change the port
[10:05]<yw>there exists software for monitoring the logs and IP-banning accordingly.
[10:05]<fyznmryf>can anyone help me - cant emerge anything more ... always getting the msg "cat: file or directory not found" for about 20 times and then its quitting configure
[10:05]<2ugmnz>ix: like fail2log?
[10:05]<rjndruax>does neowin.net work for anybody here?
[10:05]<pfjmyg>wizo: i use knock to keep the ssh port closed
[10:05]<wyej>yer i most probably should change it back
[10:05]<zznnm>Hrmm what's the easiest way so on boot with the livecd I can manually set network settings ?
[10:05]<2ugmnz>joemauch: no
[10:05]<wyej>to some other ports
[10:05]<yw>bunder: never heard of, but, probably, yes.
[10:05]<nlysax>joemauch: no
[10:05]<wyej>im just checking that i havent been compromised
[10:05]<rjndruax>k
[10:06]<zznnm>Hrmm nvm
[10:06]<yw>wizo: chkrootkit :)
[10:06]<wyej>Aug 6 23:19:29 alphak sshd[27707]: reverse mapping checking getaddrinfo for host45.worldcall.net.pk failed - POSSIBLE BREAKIN ATTEMPT!
[10:06]<wyej>:o
[10:07]<dzrdj>wizo: "attempt", see... sshd is too smart for them :P Still, might as well go ahead and check for problems...
[10:08]<wyej>yer, im checking the logs now
[10:08]<wyej>most probably a dictionary attack i think =/
[10:08]<wyej>one user every 2 minutes, he sure has alot of time
[10:08]<sdp>wizo: some sort of lousy script
[10:08]<wyej>err 2 seconds
[10:08]<dzrdj>wizo: I use iptables to allow connections only from specific IPs / MAC addresses and I use a high port number
[10:09]<wyej>5000 * 2 = 10000
[10:09]<pfjmyg>wizo: if you have a reasonable password i don't think you need to worry
[10:09]<dzrdj>wizo: and a good password ;)
[10:09]<wyej>he spent 10000 seconds, of his life, so far that i have checked
[10:09]<wyej>yer, i used to put my port number to 22222
[10:09]<pfjmyg>wizo: it's not a person, it's a program
[10:09]<pfjmyg>wizo: some worm
[10:09]<dzrdj>wizo: also there's a way to increase the delay if you get the password wrong
[10:10]<wyej>well, he still has to run the program i spose, but most probably is automated
[10:10]<dzrdj>wizo: which doesn't affect most people (who won't mind 5 seconds instead of 2) but slows automated programs and scripts down by quite a lot
[10:10]<wyej>yea i think so
[10:10]<wyej>10000 attemps
[10:11]<wyej>that would slow the script by 30000 seconds
[10:11]<pfjmyg>wizo: if the program ever got in on your computer, the first thing it would do is probably to install a program that does the same thing to others using your computer
[10:11]<pfjmyg>wizo: like a networked virus
[10:11]<dzrdj>wizo: 3600 seconds to an hour, so that's about 8-9 hrs
[10:12]<_lurznvyr_>can someone have a read of this and see if it sounds familiar? http://forums.gentoo.org/viewtopic-t-487607.html?sid=ba6a708f0574dd0e2aa35adc391e1aea thanks
[10:12]<wyej>i should be fine =D nothing seems wrong
[10:12]<wyej>and if he did get access, he would have deleted the logs
[10:12]<|afajxjfyaa|>| if i want the info about the '!' info ! or info "!" or info \! doesn't work. How can i display the man / help / info about a sign (!, :, ...)
[10:13]<dzrdj>wizo: yeah, probably
[10:13]<dzrdj>hmm,afk
[10:15]<|afajxjfyaa|>anyone?
[10:32]<yzvzz>Where can I find older versions of certain packages/ebuilds, eg, mysql?
[10:32]<dzza_zfna>intgr: sources.gentoo.org and then look in the gentoo-x86 branch
[10:32]<rm2>i have just installed the modular version of kde and now i cannot do emerge --update --deep world - is this normal?
[10:33]<sfyzrf_sxnffs>hi,
[10:33]<sfyzrf_sxnffs>I think an automatic update broke my mysql
[10:33]<rm2> have manage to emerge kdebase-meta-3.5.4 but when i try to update i am told:
[10:33]<yzvzz>mark_alec: That's a 1:1 copy of the Portage tree.
[10:33]<rm2>emerge: there are no ebuilds to satisfy "~kde-base/kcminit-3.5.4".
[10:33]<rm2>(dependency required by "kde-base/kdebase-meta-3.5.4" [ebuild])
[10:34]<dzza_zfna>intgr: you can view old ebuilds there (entire cvs history)
[10:34]<sfyzrf_sxnffs>Can someone tell me what to do about this:
[10:34]<sfyzrf_sxnffs>Apache2 has detected a syntax error in your configuration files:
[10:34]<sfyzrf_sxnffs>Syntax error on line 6 of /etc/apache2/modules.d/70_mod_php.conf:
[10:34]<sfyzrf_sxnffs>Cannot load /usr/lib/apache2/modules/libphp4.so into server: libmysqlclient.so.12: cannot open shared object file: No such file or directory
[10:34]<sfyzrf_sxnffs>whoops I got kicked
[10:35]<yzvzz>mark_alec: Ah, right
[10:35]<sfyzrf_sxnffs>I guess that was a large error message
[10:35]<sfyzrf_sxnffs>can anyone help with a shared object problem?
[10:36]<slrv>i have a major problem here
[10:36]<sxrmn2ur_>go on
[10:36]<slrv>fsck started to rebuild my tree and stopped because of bad blocks
[10:37]<slrv>now i can't do anything with it
[10:38]<sxrmn2ur_>was that tycho... nah
[10:38]<slrv>shadebug_, got any ideas on how i might be able to resque some data on that disk?
[10:39]<slrv>i know that only a real small insignificant portion is bad
[10:39]<cvyzus>my hard disk performance is too bad ... isnt there a way to defrag an ex3 file system or sumthing ?
[10:39]<axggmj_>you shouldn't have to defrag linux FSes
[10:40]<axggmj_>CVirus, do hdparm -tT /dev/<your hard disk>
[10:40]<axggmj_>and post the speeds
[10:40]<czsvnz>chendo_: that's urban myth :)
[10:40]<cvyzus> Timing cached reads: 3336 MB in 2.00 seconds = 1668.23 MB/sec
[10:40]<cvyzus> Timing buffered disk reads: 106 MB in 3.05 seconds = 34.76 MB/sec
[10:40]<sxrmn2ur_>spat, sorry, that's beyond my knowledge

Back to #gentoo
Or go to some related logs:
#gentoo
#gentoo
#suse
#gentoo
#gentoo