Hallo Leute
nun ist es wieder passiert, der POLICYD-WEIGHT Dienst ist wieder Raus gesprungen.
Jetzt habe ich in dem Loggs folgendes gefunden
/var/log/syslog
Code:
Dec 18 01:30:01 london160 /USR/SBIN/CRON[3936]: (www-data) CMD ([ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null)
Dec 18 01:30:01 london160 /USR/SBIN/CRON[3938]: (root) CMD ( /var/www/ispcp/engine/tools/ispcpphptemp.sh >/dev/null 2>&1)
Dec 18 01:30:01 london160 /USR/SBIN/CRON[3941]: (root) CMD (/var/www/ispcp/engine/traffic/ispcp-vrl-traff &>/var/log/ispcp/ispcp-vrl-traff.log)
Dec 18 01:30:01 london160 /USR/SBIN/CRON[3968]: (root) CMD (/var/www/ispcp/engine/traffic/ispcp-srv-traff &>/var/log/ispcp/ispcp-srv-traff.log)
Dec 18 01:30:03 london160 proftpd[3934]: london160.server4you.de (80.171.87.68[80.171.87.68]) - PAM(ffg_daten_bakup@welementshost.de): User not known to the underlying authentication module.
Dec 18 01:30:03 london160 proftpd[4059]: london160.server4you.de (80.171.87.68[80.171.87.68]) - FTP session opened.
Dec 18 01:30:03 london160 proftpd[4059]: london160.server4you.de (80.171.87.68[80.171.87.68]) - mod_delay/0.5: delaying for 2 usecs
Dec 18 01:30:06 london160 proftpd[4059]: london160.server4you.de (80.171.87.68[80.171.87.68]) - PAM(ffg_daten_bakup@welementshost.de): User not known to the underlying authentication module.
Dec 18 01:30:06 london160 proftpd[4060]: london160.server4you.de (80.171.87.68[80.171.87.68]) - FTP session opened.
Dec 18 01:30:08 london160 proftpd[4060]: london160.server4you.de (80.171.87.68[80.171.87.68]) - PAM(ffg_daten_bakup@welementshost.de): User not known to the underlying authentication module.
Dec 18 01:30:10 london160 proftpd[4061]: london160.server4you.de (80.171.87.68[80.171.87.68]) - FTP session opened.
Dec 18 01:30:10 london160 proftpd[4061]: london160.server4you.de (80.171.87.68[80.171.87.68]) - mod_delay/0.5: delaying for 8 usecs
Dec 18 01:30:12 london160 proftpd[4061]: london160.server4you.de (80.171.87.68[80.171.87.68]) - PAM(ffg_daten_bakup@welementshost.de): User not known to the underlying authentication module.
Dec 18 01:30:13 london160 postfix/smtpd[4062]: warning: 202.53.76.114: hostname 202.53.76.114.nettlinx.com verification failed: Name or service not known
Dec 18 01:30:13 london160 postfix/smtpd[4062]: connect from unknown[202.53.76.114]
Dec 18 01:30:13 london160 proftpd[4063]: london160.server4you.de (80.171.87.68[80.171.87.68]) - FTP session opened.
Dec 18 01:30:13 london160 proftpd[4063]: london160.server4you.de (80.171.87.68[80.171.87.68]) - mod_delay/0.5: delaying for 10 usecs
Dec 18 01:30:15 london160 proftpd[4063]: london160.server4you.de (80.171.87.68[80.171.87.68]) - PAM(ffg_daten_bakup@welementshost.de): User not known to the underlying authentication module.
Dec 18 01:30:16 london160 proftpd[4064]: london160.server4you.de (80.171.87.68[80.171.87.68]) - FTP session opened.
Dec 18 01:30:16 london160 proftpd[4064]: london160.server4you.de (80.171.87.68[80.171.87.68]) - mod_delay/0.5: delaying for 125 usecs
Dec 18 01:30:17 london160 proftpd[4064]: london160.server4you.de (80.171.87.68[80.171.87.68]) - PAM(ffg_daten_bakup@welementshost.de): User not known to the underlying authentication module.
Dec 18 01:30:18 london160 proftpd[4065]: london160.server4you.de (80.171.87.68[80.171.87.68]) - FTP session opened.
Dec 18 01:30:18 london160 proftpd[4065]: london160.server4you.de (80.171.87.68[80.171.87.68]) - mod_delay/0.5: delaying for 27 usecs
Dec 18 01:30:20 london160 proftpd[4065]: london160.server4you.de (80.171.87.68[80.171.87.68]) - PAM(ffg_daten_bakup@welementshost.de): User not known to the underlying authentication module.
Dec 18 01:30:20 london160 postfix/smtpd[4062]: warning: connect to 127.0.0.1:12525: Connection refused
Dec 18 01:30:20 london160 postfix/smtpd[4062]: warning: problem talking to server 127.0.0.1:12525: Connection refused
Dec 18 01:30:21 london160 proftpd[4067]: london160.server4you.de (80.171.87.68[80.171.87.68]) - FTP session opened.
Dec 18 01:30:21 london160 postfix/smtpd[4062]: warning: connect to 127.0.0.1:12525: Connection refused
Dec 18 01:30:21 london160 postfix/smtpd[4062]: warning: problem talking to server 127.0.0.1:12525: Connection refused
Dec 18 01:30:21 london160 postfix/smtpd[4062]: NOQUEUE: reject: RCPT from unknown[202.53.76.114]: 451 4.3.5 Server configuration problem; from=<Riegelhofer_vot@delphi.com> to=<angeln@norderstedter-sv.de> proto=SMTP helo=<delphi.com>
Dec 18 01:30:22 london160 postfix/smtpd[4062]: lost connection after RCPT from unknown[202.53.76.114]
Dec 18 01:30:22 london160 postfix/smtpd[4062]: disconnect from unknown[202.53.76.114]
Leider ist es mir nicht möglich mit meinen geringen wissen in sachen Linux möglich zu erkennen wiso das Problem auf taucht.
Kann mir einer helfen! Worauf muss ich achten was kann ich machen damit das n icht mehr passiert ?