Understanding logwatch

[Tim]

On Sat, 2011-12-24 at 12:50 +0000, Timothy Murphy wrote:
>  --------------------- iptables firewall Begin ------------------------
> 
>  Dropped 6 packets on interface eth0
>    From 87.230.101.22 - 1 packet to tcp(25)
>    From 124.229.7.16 - 3 packets to tcp(25)
>    From 190.2.0.221 - 2 packets to tcp(25)
> 
>  ---------------------- iptables firewall End -------------------------
> 
> So should I ignore these strange people?

Well, your computer ignored them...

Do you run a mail server that can accept outside connections?  If not,
it doesn't matter.  If so, check you have it configured properly, so you
can't be used to send spam through.


> And
>  --------------------- samba Begin ------------------------
> 
>  **Unmatched Entries**
>  nmbd/nmbd_incomingrequests.c:process_name_refresh_request(173)  
>     Error - should be sent to WINS server : 564 Time(s)
> 
>  ---------------------- samba End -------------------------
> 
> What is an "unmatched entry?

An educated guess suggests that the log doesn't match any previously set
conditions, so it's not being logged for a specific reason.

The error tells you that something is trying to ask it to identify a
network name, but a WINS server should have been queried, instead.

I'd wonder if somewhere, something's erroneously configured on another
computer, saying you're the WINS server.  Or, you've erroneously
announced to the LAN that you are it, when you're not.  It's a heck of a
long time since I messed with Samba, so check your configs and manuals.


-- 
[tim at localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.