RE: [webmin-l] Understanding daily "LogWatch"?

[<dav...@da...>]

Warning:  Be careful you can block YOUR access if you do not do this right!


Webmin Configuration -> IP Access Control

Change the dot to "Deny from listed addresses", this will set up a Do Not
Allow list. Now if you know your only going to access it from one IP you can
do allow, but I find this to be to inclusive for my use.

Once you have it to Deny From Listed Addresses and type in the 220 IP
address from your last e-mail.

Click Save.

This will prevent that IP from accessing webmin at all.

Now if you had a firewall setup on the machine, you could set it up to deny
all access from that IP... 

David Coley
Codecipher

-----Original Message-----
From: web...@li...
[mailto:web...@li...] On Behalf Of
pr...@pr...
Sent: Sunday, September 18, 2005 7:50 PM
To: web...@li...
Subject: RE: [webmin-l] Understanding daily "LogWatch"?

From: Prodos
To: David Coley

Dear David,

Good morning.


> Do you know who this IP address belongs to?  Otherwise it may be some
"hack"
> program trying to get into your system using common names and "idiot"
> passwords.  If you look at the pattern they are all 'common' first names,
> most being hit for 5 times.


No, I don't know who the IP address(es) belong to.
I haven't even noticed whether it's the same ones every day or not.


> If the IP address isn't one you work with, I'd consider blocking the IP
all
> together.
> 

Thanks for the advice.
Is blocking the IP something that I can do from within my WEBMIN control
panel?

Could you (or any other list member) point me to what section within 
WEBMIN is used for doing this please?

Thanks!

Best Wishes,

PRODOS

http://prodos.thinkertothinker.com









-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.1/104 - Release Date: 9/16/2005