Re: [cobalt-users] error after Bind update Raq3i

[flash22@xxxxxxx]

On Sun, 18 Mar 2001, Gerald Waugh wrote:

> "Frank Cubillos" <cubillos@xxxxxxxxxxxxxxxxxx> wrote On Sunday, March 18, 2001 
> > Mar 17 22:15:01 www proftpd[6087]: www.edirectamerica.com
> > (localhost[127.0.0.1]) - no such user 'anonymous'
> > From Logcheck, started after the latest update on the Cobalt site. No other
> > problems to report.
> 
> Does the site, have anonymous ftp enabled?
> Is your problem that anonymous ftp is not working?
> Else, it's some one attempting anonymous ftp login.
> Happens all the time, since the ftp exploit was announced.

Since it's connecting from localhost i'd hazard a guess it's the 
active monitor, I think cobalt tried to reduce log pollution by having it
log in instead of just connecting and disconnecting, but you don't have
any user named anonymous ,so it's a  little unhappy. It's kind of
lose-lose if you don't allow anonymous ftp, if you add that user you
are just going to get login refused messages instead ;)

Just tell logcheck to ignore it i suppose...

gsh