[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: sgi_fam libwrap messages



Am Mit, 2003-02-12 um 16.39 schrieb Margaret_Doll:
> I am getting the following in the LogWatch for one of my computers.  
> The number of this messages has been increasing.
> Should I be worried?

**Unmatched Entries**
xinetd[1084]: FAIL: sgi_fam libwrap from=<no address>
xinetd[1085]: FAIL: sgi_fam libwrap from=<no address>

Do you know what sgi_fam is? Have you read the manpage?
Well, in short: sgi_fam is a file alteration monitor. It is used by
applications like nautilus to check whether directories change or new
email has arrived.
So is is nothing nasty.

Secondly if you look at xinetd configuration file covering sgi_fam
(/etc/xinetd.d/sgi_fam) you will see that it is bound to localhost only.
It is not accessable from the outside. So no danger here.

The messages are probably popping up, because you entered "ALL:ALL" in
/etc/hosts.deny. You might want to allow access to this service, so add
a "sgi_fam: 127.0.0.1" to your /etc/hosts.allow.

Cheers,

Ralf

-- 
Ralf Spenneberg

IPsec/PPTP Kernels for Red Hat Linux:  
http://www.spenneberg.com/.net/.org/.de
Honeynet Project Mirror:                http://honeynet.spenneberg.org
Snort Mirror:                           http://snort.spenneberg.org





[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]