my log files-is there any problem

[John Summerfied]

Ankush Grover wrote:
> hey friends,
> 
>  Here is my log file which is generated by Logwatch .
> 
> crond:
>    Unknown Entries:
>       session closed for user root: 313 Time(s)
>       session opened for user root by (uid=0): 313 Time(s)
Those arise from cron jobs being run. It's a normal occurrence, but I 
can't attest that _all yours_ are legit. Peruse the cron logs to see the 
specifics.
> 
> 
> Relaying denied:
>    From unknown[211.48.102.152] to support at microsoft.com : 1 Time(s)
>    From unknown[222.101.92.32] to smtphunter44 at daum.net : 1 Time(s)
Someone is trying and failing to use your box to relay spam. It's 
common, undesirable and I don't know any way to prevent it for your mail 
servers. If the box doesn't need to receive email from the Internet, 
prevent it. otherwise tolerate it.

> 
> 
> I am little concerned with these 2 means are these the normal entries
> or there is some problem.As it can be seen that cron daemon opened for
> root 313 times isn't it too much.

Whether it's too much depends on what you have installed and configured.



-- 

Cheers
John

-- spambait
1aaaaaaa at computerdatasafe.com.au  Z1aaaaaaa at computerdatasafe.com.au
Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/