I made a Linux firewall using IPTABLES on RedHat 7.3 when I got my cable modem recently, and I have noticed in the logs that there are a LOT of times when the machine is hit with all kinds of requests that are logged.
Yesterday, I was doing a routine check of the system (logging in with ssh), and running the 'top' command, I noticed that it said there were 2 users logged in. So I dropped back to the shell and did a who, and root was logged in twice. The second one was me, but the first one said it was logged in from tty1. I immediately shut down the external interface and downloaded the logs, but I'm not sure what to look for, what with all the hits that the system seems to get. Any suggestions? The firewall script is pretty thorough, I think, and is well commented; but its long, so I wont post it unless asked. --JATF _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
