Re: [cobalt-users] Every 15 minutes: FTP session closed / telnet connection reset??

[Revd leonard payne <vicarage@xxxxxxxxxxxxxx>]

on 15/3/01 9:09 am, Edwin Nouwen at cobalt@xxxxxxxx wrote:

> Hi all,
> 
> According to LogCheck this is an Unusual Event...
> Why is it doing this every 15 minutes?
> Is it supposed to do this or do I have to fix something and if so, what?
> 
> Mar 10 08:30:01 www proftpd[6736]: www.intex.nl (localhost[127.0.0.1]) - FTP
> session closed
> Mar 10 08:30:06 www telnetd[6740]: ttloop: read: Connection reset by peer
>
<snip>

This is the Active Monitor check which takes place every 15 minutes.

Solutions re Logcheck

1. Now you know what it is -  ignore it. (fills up email inbox - bah!)

2. <sledgehammer> Disable the cron job for active monitor </sledgehammer>
;-) 

3. What I did was to add "127.0.0.1 as an ignore item in Logchecks ignore
files.  (This -might- be dangerous in not spotting real hacking attempts -
if any of you wizards could comment - blessings )

keep smilin'

Revd Leonard