첫번째 질문에 대한 대답은 /etc/inetd.conf에서 auth라고 시작하는 부분을
삭제하십시오. 이질문 저번에도 제가 답을 했었습니다.
게시판을 잘 검색해 보십시오.
세번째 질문은 왜 이런 메시지가 오는지 이해가 안갑니다.
왜냐면 왜 설치를 했습니까..?
정확히 얘기하면 뭔지도 모르고 설치해서 생긴 메시지 입니다.
rpm -qa | grep tripwire
해서 그냥 지우세요.. 님에게는 필요가 없어보이는군요.
: 안녕하세요..고수님의 조언을 바랄께요..
: log에 아래와 같은 메세지가 나오는군요...
:
: Aug 31 18:47:31 www named[591]: Cleaned cache of 8 RRsets
: Aug 31 18:47:31 www named[591]: USAGE 967715251 967690051 CPU=0.05u/0.04s CHILDCPU=0u/0s
: Aug 31 18:47:31 www named[591]: NSTATS 967715251 967690051 A=79 PTR=116 MX=14 ANY=33
: Aug 31 18:47:31 www named[591]: XSTATS 967715251 967690051 RR=85 RNXD=3 RFwdR=62 RDupR=0 RFail=0 RFErr=0 RErr=0 RAXFR=
: 0 RLame=0 ROpts=0 SSysQ=19 SAns=199 SFwdQ=44 SDupQ=12 SErr=0 RQ=242 RIQ=0 RFwdQ=0 RDupQ=0 RTCP=0 SFwdR=62 SFail=0 SFEr
: r=0SNaAns=144 SNXD=0 Aug 31 18:56:12 www inetd[384]: auth/tcp: bind: Address already in use Aug 31 18:57:35 www named[
: 591]: sysquery: findns error (NXDOMAIN) on ns.dadada.com?
:
: log에 보면은요... auth/tcp : bind: Addressalready in use가 왜 나오나요?
: sysquery: findns error (NXDOMAIN) on ns.dadada.com? 지는 왜나오는지요?
: 그리고 그위에 있는 메세지는 오류인가요...
:
: 밑에 설정파을을 같이 봐주세요..
: 설정이 잘못되어서 나오는것인지...아님 해커가 침입을하여서 그런것인지
: 조언을 부탁합니다...
:
:
: ==============================/etc/named.conf ==================
: // generated by named-bootconf.pl
: options {
: directory "/var/named";
: };
: zone "." {
: type hint;
: file "named.ca";
: };
:
: zone "0.0.127.in-addr.arpa" {
: type master;
: file "named.local";
: };
:
: zone "dadada.com" IN { type master; file "zone-default"; };
:
: ==============================/etc/named.boot ==================
: ;
: ; a caching only nameserver config
: ;
: directory /var/named
: cache . named.ca
: primary 0.0.127.in-addr.arpa named.local
: primary dadada.com zone-default
:
: ==============================/var/named/named.local ==================
: @ IN SOA ns.dadada.com. root.dadada.com. (
: 1999022700 ; Serial
: 28800 ; Refresh
: 14400 ; Retry
: 3600000 ; Expire
: 86400 ) ; Minimum
: IN NS ns.dadada.com.
:
: 1 IN PTR localhost.
:
: ==============================/var/named/zone-default ==================
: @ IN SOA ns.dadada.com. root.dadada.com. (
: 1999022700 ; Serial
: 28800 ; Refresh
: 14400 ; Retry
: 3600000 ; Expire
: 86400 ) ; Minimum
: IN NS ns.dadada.com.
: IN A 111.111.22.22
: IN MX 10 @
: www IN CNAME @
: mail IN CNAME @
:
: 1 IN PTR localhost.
:
:
: 아래의 메세지[root에게 mail이 오네요]가 왜 오는지 모르겠어요.....
: 도움을 부탁할께요..
:
: From root Sat Aug 26 04:02:41 2000
: Return-Path:<root at www.dadada.com>
: Received:(from root@localhost)
: by www.dadada.com (8.10.1/8.10.1) id e7PJ2fP01223
: for root; Sat, 26 Aug 2000 04:02:41 +0900
: Date: Sat, 26 Aug 2000 04:02:41 +0900
: From: root <root at www.dadada.com>
: Message-Id:<200008251902.e7PJ2fP01223 at www.dadada.com>
: To: root at www.dadada.com : Subject: File integrity report
:
: This is an automated report of possible file integrity changes, generated by
: the Tripwire integrity checker. To tell Tripwire that a file or entire
: directory tree is valid, as root run:
:
: /usr/sbin/tripwire -update [pathname|entry]
:
: If you wish to enter an interactive integrity checking and verification
: session, as root run:
:
: /usr/sbin/tripwire -interactive
:
: Changed files/directories include:
:
: From root Sat Aug 26 04:02:41 2000
: Return-Path:<root at www.dadada.com>
: Received:(from root@localhost)
: by www.dadada.com (8.10.1/8.10.1) id e7PJ20U01071
: for root; Sat, 26 Aug 2000 04:02:00 +0900
: Date: Sat, 26 Aug 2000 04:02:00 +0900
: Message-Id:<200008251902.e7PJ20U01071 at www.dadada.com>
: From: root at www.dadada.com (Cron Daemon)
: To: root at www.dadada.com : Subject: Cron <root@www> run-parts /etc/cron.daily
: X-Cron-Env:<SHELL=/bin/bash>
: X-Cron-Env:<PATH=/sbin:/bin:/usr/sbin:/usr/bin>
: X-Cron-Env:<MAILTO=root>
: X-Cron-Env:<HOME=/>
: X-Cron-Env:<LOGNAME=root>
:
: error: httpd:1 duplicate log entry for /var/log/httpd/access_log
: /usr/sbin/tripwire: database file '/var/spool/tripwire/tw.db_www.dadada.com' does not exist! Aborting...--우리나
: 라 좋은 나라 닐리리 만보