Log inUsernamePassword
Log me on automatically each visit    
Register
Register
Log in to check your private messages
Log in to check your private messages
SMS Forum Index » SMS User Support

Post new topic   Reply to topic
dansguardian
View previous topic :: View next topic  
Author Message
toothandnail
Member


Joined: 17 Mar 2011
Posts: 63
Location: Oxfordshire, UK

PostPosted: Sun Feb 09, 2014 4:43 pm    Post subject: dansguardian Reply with quote

This is a bit odd. I have been having lots of attempted ssh attacks on my SMS server, so I check /var/log/messages quite frequently.

Doing so earlier today, I noticed this entry:

Code:
Feb  9 04:40:07 sms dansguardian[5474]: Started sucessfully.


Running px ax | grep dansguardian shows that it is indeed running:

Code:
root@sms:/var/log# ps ax | grep dansguardian
 5474 ?        Ss     0:00 /usr/sbin/dansguardian
 5476 ?        S      0:00 /usr/sbin/dansguardian
 5477 ?        S      0:00 /usr/sbin/dansguardian
 5478 ?        S      0:00 /usr/sbin/dansguardian
 5479 ?        S      0:00 /usr/sbin/dansguardian
 5480 ?        S      0:00 /usr/sbin/dansguardian
 5481 ?        S      0:00 /usr/sbin/dansguardian
 5482 ?        S      0:00 /usr/sbin/dansguardian
 5484 ?        S      0:00 /usr/sbin/dansguardian
 5485 ?        S      0:00 /usr/sbin/dansguardian
 5486 ?        S      0:00 /usr/sbin/dansguardian


What is puzzling me is that /etc/rc.d/rc.dansguardian is not executable, so it looks as though it is being started by some other process. I've searched through /etc/rc.d and can only find two references to dansguardian, neither of which should be able to start the process.

So, can anyone tell me what might be calling it, and how to prevent it in future?

Paul.
Back to top
View user's profile Send private message
gerasimos_h
Site Admin


Joined: 09 Aug 2007
Posts: 1753
Location: Greece

PostPosted: Sun Feb 09, 2014 5:05 pm    Post subject: Reply with quote

There is a logrotate , that will start dansguardian if it finds the /var/log/dansguardian/access.log...

Just remove /etc/logrotate.d/dansguardian.
I'll fix that in smsconfig to remove it when disable it, and restore it when enabled....

gerasimos_h

_________________
Superb! Mini Server Project Manager
http://sms.it-ccs.com
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    SMS Forum Index » SMS User Support All times are GMT + 2 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum

SMS - Superb! Mini Server Project © 2016
Powered by phpBB © 2001, 2002 phpBB Group
iCGstation v1.0 Template By Ray © 2003, 2004 iOptional