Re: [cobalt-users] RaQ3 log files and system upgrades

["Steven Werby" <steven-lists@xxxxxxxxxxxx>]

M Fryer <mfryer@xxxxxxxxxx> wrote:
> 1) Which log files do you recommend we keep a close eye on to catch
> tampering by hackers/pranksters?

Spend some time learning what all of your logs record.  They're in /var/log/ and
/home/log/httpd.  If you had to ask that question you probably aren't going to know
what to look for anyway.  Get a good general book on Linux and spend some time
reading about logs and security.

> We currently review the web.log each week? Any others helpful?

That's not going to tell you much at all about hacking attempts and security
concerns.  You may want to look at the Cobalt admin log to check for attempts to gain
entry, maillog to see if you are a spam relay or receiving DOS attacks, the FTP log,
etc.

Steven Werby {steven-lists@xxxxxxxxxxxx}