Ubuntu Servers :: Ssh Logged Port In Auth.log Is Different Than 22
Oct 22, 2010As far as I understand ssh runs on port 22 but in my /var/log/auth.log I see
Quote:
why is this logged 48504 different than ssh port 22?
As far as I understand ssh runs on port 22 but in my /var/log/auth.log I see
Quote:
why is this logged 48504 different than ssh port 22?
I don't think it would be harmful to run ssh on the default port of 22. Especially since the machine will only accept key-based logins and only accept traffic on port 22 from external IP addresses that I specify.
View 8 Replies View RelatedLately I have been receiving this in my auth.log file. It seems to be repeating over and over, and I didn't know if was anything normal or something I should be worried about...
Code:
When ever I restart ssh
Quote:
/etc/init.d/ssh restart
I see following line in auth.log
Quote:
sshd[5678]: error: Bind to port 22 on :: failed: Address already in use.
That is a headless server. What does the above line signify or tell and why am I seeing that? Ubuntu 10.04 64 bit server edition
I have succesfully set up authentication manually in Ubuntu so users can log on with Windows Active Directory accounts and have their network drives mapped automatically using pam_mount.
Please note due to the setup I can't make any changes to the Windows 2k3 server.
If a user wants their password reset I can change it to a generic password. When they next log on to a Windows computer with the generic password it will automatically ask them to change it to something else.
Is there anyway to get this to work with Ubuntu 10.10? At the moment when logging onto Ubuntu with an account that is in this state the message Please change your password appears, it then proceds to log on without prompting to change the password and natually it won't map the drives etc.
I have the system setup and working, but I want to put it in a corner and forget about it. Problem is, nothing starts running unless I'm logged in. And if I log out, everything stops again.It's running a LAMP server and has VNC and SSH servers as well. I want all of that to start without having to log in. That way I can remote reboot without worries and connect and login with either VNC or SSH.Everything seems to have an entry in /etc/init.dIs the way it's acting normal behavior? It's a fresh install, then I installed everything I needed from the repos.
View 7 Replies View RelatedI'm a bit lost with the PHP/Sendmail configuration, maybe somebody could help me getting back on the right track. Following situation:
Postfix:
* accepts smtp on port 25 but from his own domains. Some policy and spamchecks through amavisd are made.
* accepts submission on port 587 and 465 from authenticated users only. Quota and spamchecks prevent outgoing spam.
So I'm enforcing a very strong outgoing spam-policy but the users are still able to use the php mail() function to send spam through the /usr/sbin/sendmail command.
My users have access to their own php.ini so my idea was to somehow enforce the delivery through the local postfix on port 587 or 465 and just let them enter their user/pass in their php.ini. (I suppose, their might be a cleaner-solution ).
Unfortunately, my configurations like smtp_host, port, user etc. are getting ignored if the sendmail_path line is active. But if I comment this line out, php just uses the default, which is the same as configured in the sendmail_path line - so it's active whether i use the line or not (setting it to an invalid command breaks the mail() function completely).
how can I enforce my anti-spam policy on the php mail() command?For my ssh users I just blocked the outgoing connection to localhost on port 25 which seems to work so far, but somehow the postfix-sendmail-wrapper just ignores this.
I'm trying to config a customer's samba server to use a MS 2003 SBS for auth. The samba is for file sharing only config'ed with disk quota's. Currently the samba is config'ed for auth = Users. But I want a central point for user auth, and since they already have the sbs in place, I'd like to use that.
View 1 Replies View RelatedI have been faithfully following the postfix/sasl/etc install docs from [URL] and seem to have hit a minor snag with SASL authentication for SMTP. KMail cryptically leaves me with a generic auth fail notice and tailing the mail logs gives me
[Code]...
how to bind a script to a F key (F12) that will run as root even when not logged in. I have a headless server on client premises where it'd be easier for them to press F12 to run this script that will be rarely needed than to give them SSH instructions etc. I know this must be do-able, but I can't get my Google-fu on for this question. The only way that I can possibly think of doing it is to touch a file whenever that key is pressed and have the script idly checking for that file every few seconds in a loop.
View 2 Replies View RelatedI'm a total Linux noob, but I've needed a working development server for a while so I've put together an old celeron box running Ubuntu Server 10.10.The box runs fine, as does the Apache and MySQL servers, even if they did take a little while to fine tune!The problem I have is that vsftpd doesn't respond unless I'm logged on locally or via putty. As long as a local user is logged in, it's fine. If I try to connect when noone is logged in, then the connection times out waiting for the server message, and thereafter I have to login and stop / restart the vsftpd to make it work again.I'm not sure if the vsftpd is set to run on boot or on login and I have no idea how to check. Vsftpd is set to allow only local users, of which there is only one - so I can't check if it would work with any user logged in
View 3 Replies View RelatedAfter a battle with Ubuntu, Django, Apache and wsgi i could reach the website i set up from another computer via ip-adress (10.37.129.6). i then restarted the server and after booting tried to access the website from outside - permission to / denied with the usual 403 error. trying to fix that, i logged in to the server and suddenly the website was available again. typed logout on the server - no access wt. 403. logged in - website can be accessed.i somehow suspect this is some strange permission problem, but i don't have a clue where to start searching. errorlogs just contain information that a / access request has been denied.
View 1 Replies View Relatedthe apche2.conf and vhost file I gave the link are the machine on LAN when site is actually hosted.When some one from internet access the site then I expect a log of IP in access.log instead of which I see the IP of machine which is working as Reverse Proxy server for all such requests.What mistake did I do above.
View 4 Replies View RelatedHow can I (as admin) find out when a certain user e.g. "karl" most recently logged in and most recently logged out of a system?
View 2 Replies View RelatedI want to backup some data on my Fedora box to a external Hard Disk (USB). I mounted the external HD on my box. I wrote a bash script to do that and I scheduled a cronjob to execute the script. When I am online the script executes as planned. However when I am logged out the copy does not work. I also tested this with a cifs mount (via fstab) and that does not work either. I set the script to generate some output at the end and that is OK so the script does run when I am offline. I suppose the mounted locations are not reachable while logged out, is that correct? Is there a workaround so I can reach the mounted locations while logged out?
View 2 Replies View Relatedlogging in a server through putty in the same network when i executed last command its showing system ip logged in time and logged out time the output as followsthis is my system
oot pts1 xx.xx.xx day month date time in time out timeand similarly am geeting other than this likeroot :0day month date time still logged in this is from more than 3 days its logged in
I'm trying to install phpMyAdmin on my Ubuntu 10.10 server. I type the following command (I don't use "sudo" because I'm logged in as root, I know its not safe):
Quote: apt-get install phpmyadmin and go through the installation. I allow the installation to configure the database, and I chose the correct server (Apache2), when it asks for passwords, I use the same password that I use for the rest of the server (i.e. it is the account password for root, sudo, and my account). Once the installation is complete, I try and access it from a computer on the same network. I type "http://***.***.*.*/phpmyadmin" and I get the message saying the directory isn't there. I go into Webmin to confirm that the directory isn't there, and it isn't.
My questions are (1) Why isn't the phpmyadmin directory in my Apache Server root? (2) Is it installed with apt-get, if so, where? (3) How do I know what server I selected for it to install to? (4) What do I need to do to get it to install correctly?
I was running 10.04 LTS and had decided to stick to the LTS versions as I'm now running my machine as a server and don't want to be updating regularly.Every time I logged in via SSH I got a message telling me there where packages to update including a security update. So I did a search to find out how to perform an update on Ubuntu server from the command line.What I found was to do this:sudo apt-get updatesudo apt-get dist-upgradeAfter doing that I rebooted but now my machine gives me this message:
init: ureadahead-other main process (794) terminated with status 4Your disk drives are being checked for errors, this may take some timePress C to cancel all checks currently inprogressI'm not pressing C yet and leaving it alone to finish, but I noticed when the machine booted that one of the options for booting talked about Ubuntu 10.10, so I'm worried that I've updated from 10.04 LTS to 10.10 by accident?
but I have a few Ubuntu server's that are Headless, and rather than walking to the server room with a display i thought, id rather push for a good challenge..So I would like to know how to remotely login to these Server's Desktop environments. not necessarily with more than one user at a time. just need to login to the machine's via VNC or RDC preferably VNC I do my admin work with Apple Remote Desktop. but I have RDC as well..
I set these systems up for my IT Department... and I need them to be super easy to access for the rest of my team. ( I am the only one aside from or Director privy to using the command line ) so in order to make it possible for normal humansI'm installing the desktop enjoyment on each of them now. but..From what I have found in my previous Linux adventures - it is not possible to VNC to system that is not already logged in, in other words if the machine is booted, but at the login window.. I have never been able to connect via VNC, I am only able to do this once the machine is physically logged in to it's desktop nvironment once that has happened I am able to connect with VNC, but,, something tells me this is possible - this is something I do on a regular basis with my OSX server's - and with RDC to manage my active directory server
I want to do a simple port redirect, i.e. whatever comes trough whatever interface on port AAAA will get redirected to port BBBBI thought that iptables -t nat -I PREROUTING --source 0/0 --destination 0/0 -p tcp --dport AAAA -j REDIRECT --to-ports BBBBhowever it doesn't work, e.g. nc -v -w2 -z localhost AAAA gives:
nc: connect to localhost port AAAA (tcp) failed: Connection refused
while
nc -v -w2 -z localhost BBBB
[code]....
I can seem to open port 25565 for a java application (executable jar)
I'm running ubuntu server 9 thoroughly up to date code...
Yet connections to port 25565 fail when I have the firewall enabled (sudo ufw enable)
For example canyouseeme.org says "Error: I could not see your service on port (25565) Reason: Connection timed out"
And connections to port 25565 _DO WORK_ when I disable the firewall (sudo ufw disable)
canyouseeme.org says "Success: I can see your service on port (25565)"
I have an Ubuntu 11.04 server with lighttpd installed as my web server. It was working fine, but now when I restart it it gives me the following error...
"can't bind to port: 80 Address already in use"
Is there a way for me to find out what is using port 80 in it's place?
I have a virtual server setup on port 80 that works fine, however, if I change the port to, say, 8080 the browser then fails to connect.I'm using webmin to configure everything, all the other settings seem to work as I would expect.I get the error "Safari canī open the page http://192.168.0.12:8080 because Safari cant connect to the server 192.168.0.1." in safari, and i get something similar on the xubuntu machine in firefox connecting via localhost.It's almost as though theres a firewall in the way, but I think it's more likely to be some config problem.
View 2 Replies View RelatedSo first off, it probably seems this question has been asked thousands of times before. but I did do a search, mostly archived posts that ended up being something other than a true ip blocking of the port. [URL]..
So my port 80 is truly blocked. Ive tried setting up the port forwarding on my router, Ive tried manually allowing all traffic on port 80 through ip tables. Ive even dabbled with setting up something like openDNS to see So far nothing, Im only available on my local network.
There has to be some way to do a redirect though. even something as simple as an htaccess file redirecting [URL].. xxxx (the space is there to avoid my url being interrupted by a smiley
I was wondering if I can use a different port for WebMin down below 1024 where I forward ports to my Linux box, rather than the current 10,000.
The reason is I forward higher ports to the Windows machine at present.
The goal is to keep Linux services down in the low port range. Suggestions?
when i fisrt signed up for this forums i accidently posted this same topic in the first place i found apropriate(network/wirless) and i just realised i didn't look hard enough so i marked my old post as solved, please admin delete that one. ubuntu server 10.04 LTS running ubuntu desktop on top(for my lack of skill)ok nitty-gritty. i have been learning to use linux for a few months now and i like it but i cannot access my server through WAN on any ports, yes i have them all open and enabled and associated on my router properly. i even tryed turning off firewall on here and i have tryed a list of misc. things. is there something i am not doing that one might initialy do when first starting an ubuntu server?
View 9 Replies View RelatedI have two computers on a LAN. (This is history not a Bazaar question, although I have one of those too) One of them (Ubuntu 9.04) Im using as a Bazaar repository over sftp. Its been working fine for about a year. Then we had a thunderstorm that knocked out our Internet service for a couple of days. When it came back up everything is working fine accept I could no longer commit to the server. A little detective work showed that ssh was not running on the server. I started it and Bazaar then couldnt find the repository files. I still suspected an ssh problem, but port scans from both computers showed port 22 open on the server and I could do a ssh login from the client ok. Then I started fiddling with ssh on the server and now I have ssh problems on top of the Bazaar problems.
On the server I deleted then regenerated the ssh keys. Ive done
sudo /etc/init.d/ssh reload
sudo /etc/init.d/ssh start
I get a normal starting message and ps ef |grep ssh
shows /usr/sbin/sshd running. But the port scan does not show 22 open and I get connection refused at the client.
I would like to change port number for a specific folder name on linux server like domain.com/folder_name:yyyy so people can access that folder with pre defined port number. is there a way that I can do that?
View 2 Replies View RelatedIs it possible to check if a particular port is open for a particular ip in the terminal?
View 4 Replies View RelatedI have Ubuntu Server (x64) installed on my box with Apache2 and Squid. For awahile port 80 (http) was fine, I could update packages and use wget. Then one random day port 80 became blocked for incoming traffic. I couldn't use apt-get and had to change to an ftp mirror to update. Also wget is not working.
View 3 Replies View Related