HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   pureftpd - auth.log records with empty rhost (http://www.howtoforge.com/forums/showthread.php?t=57624)

shr3k 14th June 2012 11:30

pureftpd - auth.log records with empty rhost
 
Hi all, have you anyone found also following similar strange records in your Debian-based system auth.log as well?:

Code:

Jun 14 08:17:41 swamp pure-ftpd: pam_unix(pure-ftpd:auth): check pass; user unknown
Jun 14 08:17:41 swamp pure-ftpd: pam_unix(pure-ftpd:auth): authentication failure; logname= uid=0 euid=0 tty=pure-ftpd ruser=skvpraha rhost=
Jun 14 08:17:41 swamp pure-ftpd: pam_unix(pure-ftpd:auth): check pass; user unknown
Jun 14 08:17:41 swamp pure-ftpd: pam_unix(pure-ftpd:auth): authentication failure; logname= uid=0 euid=0 tty=pure-ftpd ruser=skvpraha rhost=
Jun 14 08:17:54 swamp pure-ftpd: pam_unix(pure-ftpd:auth): check pass; user unknown
Jun 14 08:17:54 swamp pure-ftpd: pam_unix(pure-ftpd:auth): authentication failure; logname= uid=0 euid=0 tty=pure-ftpd ruser=skvprahaskvpraha rhost=
Jun 14 08:17:57 swamp pure-ftpd: pam_unix(pure-ftpd:auth): check pass; user unknown
Jun 14 08:17:57 swamp pure-ftpd: pam_unix(pure-ftpd:auth): authentication failure; logname= uid=0 euid=0 tty=pure-ftpd ruser=skvprahaskvpraha rhost=

I wonder how it is possible that pureftpd does not detect remote host. My fail2ban can't subsequently block it because is missing rhost... :confused:

And /etc/pure-ftpd/conf/DontResolve is set to yes of course.

falko 15th June 2012 12:43

Quote:

And /etc/pure-ftpd/conf/DontResolve is set to yes of course.
Have you tried no instead?

shr3k 15th June 2012 14:05

Yes I tried, but it was unnecessary at all, daemon get's called by /usr/sbin/pure-ftpd-wrapper script, where's clearly stated 'DontResolve' => ['-H'], line. I tried manually launch as well with --dontresolve but no luck, seems to be bug in this Ubuntu 11.10 build.


All times are GMT +2. The time now is 23:09.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.