similar to: Have I been hacked?

Hello, My entry for newsyslog in /etc/crontab is: 0 * * * * root newsyslog -t \%Y-\%m-\%d_\%H:\%M And I get: newsyslog: Could not convert time string to time value: No such file or directory I try to use the newsyslog from head to to avail. This solution was working a month ago (see Revision 248776) My file system is zfs version 28. Henri

hello, i have a FreeBSD 4.8-PRERELEASE #0 that i use as a gateway / nat box for my home. It also acts as a dns / mail server to the outside world. I'm using ipf and basically filter for bogus networks on the way in and out. I allow everything out keeping state, and allow this in: pass in proto icmp from any to any icmp-type squench group 200 pass in proto icmp from any to any icmp-type timex

Dear list! I have a little problem, trying to enable logging of deny rule. I have enabled it via kernel: options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=3 It is ipfw2. After that, my inten- tion was to use syslogd and !ipfw *.* /var/log/ipfw.log and newsyslog with /var/log/ipfw.log 600 3 100 * J In rc.conf I have firewall_enable="YES"

I'm running a few servers sitting on top of a NetAPP file server ? everything runs great, but periodically I'm getting: nfs_getpages: error 13 vm_fault: pager read error, pid 11355 (https) errors on my screen ? not always same pid ? the annoying part is that it seems to always affect the same jail that is running .. if I shutdown all jails on that physical server, everything shuts down

Using FreeBSD-7.2, I am attempting to configure the system newsyslog utility to rotate the dovecot.log file. I would prefer to use the system utility rather than the one described on the dovecot wiki for rotating the file. Unfortunately, it is not working. This is the error message that is spawned: newsyslog: illegal signal number in config file: /var/log/dovecot.log root:wheel 0666 1 *

All: I'm posting this to FreeBSD-security (rather than FreeBSD-net) because the problems I'm seeing appear to have been caused by spyware, and because they constitute a possible avenue for denial of service on FreeBSD machines with default installs of the operating system. Several of the FreeBSD machines on our network began to act strangely during the past week. Some have started to

Hi, I have a question on tftpd on Slackware - I know this is an embedded Linux forum, but I think it still must be the appropriate place to ask. I have hpa-tftpd V0.40 on Slackware 9.1. No matter what I do, I can't get files transferred to the tftp server. I just get timeouts - no messages in /var/log/messages or in /var/log/syslog - just dealthly silence. This is the configuration line

Greetings The Unix application 'wavsilence' is a program that takes a WAV file with gaps of silence and creates smaller WAV files, containing the data between the gaps. ( http://danplanet.com/wav/ ) Is there a similar program for ogg vorbis? How difficult would it be to write such a program? --------------------------------------------------------------------------- The usage

Hello, I am looking for some advice. I am trying to force dovecot to run to the same log as exim does. In dovecot.conf I put the exim log path /var/log/exim/mainlog. I restarted dovecot and the process worked fine. However at midnight exim log file is rotated and since then dovecot stops logging to this log. In syslog.conf I put: mail.*

Hi all! I've decided to rotate the dovecot logs automatically on my freebsd 10.4 server using the system's newsyslog feature. I started with logfile.info putting the line /var/log/dovecot/logfile.info 600 31 * @T16 ZCU /var/run/dovecot/master.pid 30 which should send a SIGUSER to the master process, which it seems to do for I see in the log file: master:

Hi, I have a system which monitors 2 UPSs, and it runs upslog twice. I had a problem with newsyslog rotating the log file because upslog keeps it open (arguably a bug IMO), but it also has no way of changing the PID file so newsyslog can't HUP it when log rotating. Attached is a patch which allows you to specify the argument for writepid() so you can differentiate them easily. -- Daniel

-------- Original Message -------- Subject: Re: Dovecot 2.2.16: disappearing messages, mismatched summaries, duplicated messages, excessive full re-downloads From: Benny Pedersen <me at junc.eu> To: dovecot at dovecot.org Date: Mon Jun 01 2015 16:47:48 GMT+0300 (Arabic Standard Time) > Alessio Cecchi skrev den 2015-06-01 15:29: >> Il 20/05/2015 10:44, David Gessel ha scritto:

hey, i need to know who deleted files on our server so i added the audit module. but now i cant find any hint in the log file which user deleted the file. it just shows me "Feb 6 13:54:57 smb.-server smbd_audit[13881]: opendir .recycle". How can i do that? another question is: how can i tell samba to keep more versions of the log files? Now it only keeps a client.log and a

Heya.. Yesterday someone "attacked" by box by connection to several ports.. In other words, a simple portscan.. yet, since my box has "log_in_vain" enabled, so it tries to log everything to /var/log/messages, since the logfile got full and the size went over 100K, it tried to rotate the log to save diskspace. (Apr 16 21:00:00 omikron newsyslog[32137]: logfile turned over due

Hello, I'm useing freebsd 5.2.1 with icecast 2.0 and darkice 0.8 with a radiocard from avermedia 206 and a cmedia soundcard. i't works fine! just four points. 1. the ogg with vbr and a quality of 0.6 has a high tone in it. is there a known reason for? 2. filerecording works fine but how can i make every hour a new file without breaking the stream for listener? i thought

Hello, For some time now have been trying to connect a Samba-3.0.14a-0.4 server running on SuSE Ent 9 linux server to our Exchange 2003 (running on Server 2003 Std w/ SP1) server which is also the AD server for our domain. I can connect to the shares using the AD as the authentication source, so the basic functionality is there but some command output does not show in the way i expect

Hello, It's a bit off topic, but I'm hoping someone has seen this before. I'm running a couple of headless boxes, one is 4.7 release, the other is 4.8 release. Both have the same issue with newsyslog when I've got the serial port enabled for console management. (-h in boot.conf and a getty running on cuaa0 after the boot process) Logrotate tries to send an HUP to syslogd, but

Hi, I have a suggestion for the logging part of the documentation website. It would be nice to have example configurations for the various alternatives that exist for the traditional (Linux) syslog daemons (sysklogd) appended to the Shorewall logging documentation. E.g. msyslog, newsyslog, syslog-ng, metalog. In a recent posting on the Gentoo-Security mailing list I sent my configuration for

On 16 Jun 2015, at 03:50, David Gessel <gessel at blackrosetech.com> wrote: > >> Alessio Cecchi skrev den 2015-06-01 15:29: >>> Il 20/05/2015 10:44, David Gessel ha scritto: >>>> Is there a way to completely disable caching on dovecot? >>> >>> Yes: mail_location = maildir:~/Maildir:INDEX=MEMORY >> >> dont know if that really

Hi, On Fri, Jan 19, 2018 at 05:00:33PM +0100, Luciano Mannucci wrote: > I've decided to rotate the dovecot logs automatically on my freebsd > 10.4 server using the system's newsyslog feature. I started with > logfile.info putting the line > > /var/log/dovecot/logfile.info 600 31 * @T16 ZCU /var/run/dovecot/master.pid 30 > > which should send