Re: [cobalt-users] Portsentry on Raq3 Question

["Cobalt" <cobalt@xxxxxxxxxx>]

> I constant get this message in my log email, and I'm not sure why.  I'm a
> novice at this so please bear with me:
>
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Mar 17 20:15:01 ferrara proftpd[7291]: xx.xx.com (localhost[127.0.0.1]) -
no
> such user 'anonymous'
>
> Is this normal?  Is my server trying to ftp to itself?  Any help would be
> great.  Thanks.

Very normal, is only the test for ftpd is up. Look at /etc/crontab, you
encounter
one line at end who start every 15 minutes this test and others (imap, pop,
etc..)
you can disable this event from logcheck adding one line to:
/etc/logcheck/logcheck.ignore like this:

    proftpd.*localhost

Hope this helps

RB